ci: Fix `path` input for vcpkg downloads cache
What the developer wrote
Authored by Hennadii Stepanov
ci: Fix `path` input for vcpkg downloads cache
The `path` inputs for the `cache/save` and `cache/restore` actions must
have identical content.
What changed, and why it matters
This is a minor GitHub Actions CI configuration fix. It moves a comment onto its own line so that the cache save and restore steps use identical path patterns. There is no security issue in the code change itself.
No security action required. Treat as a normal CI maintenance commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adjusts the path input of a GitHub Actions cache/save step. Previously a YAML comment was placed inline after an exclude pattern, which could cause the cache/save and cache/restore steps to have technically different path content. The fix moves the comment to its own line so both cache steps match exactly. This is a CI reliability/correctness fix, not a vulnerability fix.
Changed components
.github/workflows/ci.ymlInspect captured patch +2 / −1
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ea62ef28..6784174f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -285,9 +285,10 @@ jobs:
# Only save cache from the 'standard' job, as it includes the necessary downloads for other jobs in the matrix. If the matrix is modified, this may need amending.
if: github.event_name != 'pull_request' && github.ref_name == github.event.repository.default_branch && steps.vcpkg-binary-cache.outputs.cache-hit != 'true' && steps.vcpkg-downloads-cache.outputs.cache-hit != 'true' && matrix.job-type == 'standard'
with:
+ # Cache the tools once as archives, but not redundantly in extracted form.
path: |
~/AppData/Local/vcpkg/downloads/*
- !~/AppData/Local/vcpkg/downloads/tools # Cache the tools once as archives, but not redundantly in extracted form.
+ !~/AppData/Local/vcpkg/downloads/tools
key: ${{ steps.vcpkg-downloads-cache.outputs.cache-primary-key }}
- name: Build
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.