What the developer wrote
Authored by will
ci: add job to determine runner type
To remove multiple occurances of the respository name, against which we
compare `${{ github.repository }}` to check if we should use Cirrus
Runners, introduce a helper job which can check a single environment
variable and output this as an input to subsequent jobs.
Forks can maintain a trivial patch of their repo name against the
`REPO_USE_CIRRUS_RUNNERS` variable in ci.yml if they have Cirrus Runners
of their own, which will then enable cache actions and docker build
cache to use Cirrus Cache.
It's not possible to use `${{ env.USE_CIRRUS_RUNNERS }}` in the
`runs-on:` directive as the context is not supported by GitHub.
If it was, this job would no longer be necessary.
What changed, and why it matters
This commit is a routine cleanup of the project's GitHub Actions CI configuration. It introduces a small helper job that decides whether to use Cirrus-hosted runners or GitHub-hosted runners based on a repository name comparison. There is no security-relevant change; it only reorganizes existing logic to reduce repetition.
No security action required. Review the full workflow file to confirm downstream jobs consume the new output correctly, but this commit itself is benign infrastructure refactoring.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds a new runners job in .github/workflows/ci.yml that outputs a boolean use-cirrus-runners by comparing the REPO_USE_CIRRUS_RUNNERS environment variable with ${{ github.repository }}. This output is intended to be consumed by downstream jobs (not shown in this patch) to select runner types and caching backends. The logic is functionally equivalent to previous inline comparisons and introduces no new secrets, permissions, network exposure, or code execution paths.
Changed components
.github/workflows/ci.ymlInspect captured patch +16 / −0
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 836e3834..7c82084b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,6 +30,22 @@ defaults:
shell: bash
jobs:
+ runners:
+ name: 'determine runners'
+ runs-on: ubuntu-latest
+ outputs:
+ use-cirrus-runners: ${{ steps.runners.outputs.use-cirrus-runners }}
+ steps:
+ - id: runners
+ run: |
+ if [[ "${REPO_USE_CIRRUS_RUNNERS}" == "${{ github.repository }}" ]]; then
+ echo "use-cirrus-runners=true" >> "$GITHUB_OUTPUT"
+ echo "::notice title=Runner Selection::Using Cirrus Runners"
+ else
+ echo "use-cirrus-runners=false" >> "$GITHUB_OUTPUT"
+ echo "::notice title=Runner Selection::Using GitHub-hosted runners"
+ fi
+
test-each-commit:
name: 'test each commit'
runs-on: ubuntu-24.04
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.