ci: Only write docker build images to Cirrus cache
What the developer wrote
Authored by MarcoFalke
ci: Only write docker build images to Cirrus cache
Other cache providers offer too little space for this to be useful.
What changed, and why it matters
This is a minor change to Bitcoin Core's continuous integration (CI) setup. It stops saving large Docker build cache images to GitHub Actions' cache and only saves them to the Cirrus cache, because other cache providers don't offer enough storage. There is no user-facing or security-relevant change.
No action needed. This is a benign CI configuration optimization.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies .github/actions/configure-docker/action.yml. Previously, Docker build cache was pushed (--cache-to) on every push to the default branch. Now it only pushes the cache when inputs.cache-provider is cirrus. This is a resource/space optimization for CI caching, not a security fix.
Changed components
.github/actions/configure-docker/action.ymlInspect captured patch +2 / −2
diff --git a/.github/actions/configure-docker/action.yml b/.github/actions/configure-docker/action.yml
index 9c2ce93f..8c2ecd06 100644
--- a/.github/actions/configure-docker/action.yml
+++ b/.github/actions/configure-docker/action.yml
@@ -48,8 +48,8 @@ runs:
# Always optimistically --cache‑from in case a cache blob exists
args=(--cache-from "type=gha${url_args:+,${url_args}},scope=${CONTAINER_NAME}")
- # If this is a push to the default branch, also add --cache‑to to save the cache
- if [[ ${{ github.event_name }} == "push" && ${{ github.ref_name }} == ${{ github.event.repository.default_branch }} ]]; then
+ # Only add --cache-to when using the Cirrus cache provider and pushing to the default branch.
+ if [[ ${{ inputs.cache-provider }} == 'cirrus' && ${{ github.event_name }} == "push" && ${{ github.ref_name }} == ${{ github.event.repository.default_branch }} ]]; then
args+=(--cache-to "type=gha${url_args:+,${url_args}},mode=max,ignore-error=true,scope=${CONTAINER_NAME}")
fi
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.