What changed, and why it matters
This commit adds a single environment variable to the project's GitHub Actions CI workflow. It tells Docker where to find a local Cirrus CI build cache server (127.0.0.1:12321). There is no security-relevant change: it does not introduce secrets, change permissions, modify network exposure, or alter how Bitcoin Core itself runs.
No security action required. Review as normal CI infrastructure change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds CIRRUS_CACHE_HOST: http://127.0.0.1:12321/ to .github/workflows/ci.yml. This value is a localhost address used by the docker gha build cache backend when jobs run on Cirrus Runners. It is purely a CI/infrastructure configuration tweak to enable Docker build caching; it does not affect Bitcoin Core code, build scripts, runtime behavior, or the threat model.
Changed components
.github/workflows/ci.ymlInspect captured patch +1 / −0
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bd9c0b64..836e3834 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,6 +19,7 @@ concurrency:
env:
CI_FAILFAST_TEST_LEAVE_DANGLING: 1 # GHA does not care about dangling processes and setting this variable avoids killing the CI script itself on error
+ CIRRUS_CACHE_HOST: http://127.0.0.1:12321/ # When using Cirrus Runners this host can be used by the docker `gha` build cache type.
MAKEJOBS: '-j10'
REPO_USE_CIRRUS_RUNNERS: 'bitcoin/bitcoin' # Use cirrus runners and cache for this repo, instead of falling back to the slow GHA runners
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.