What the developer wrote
Authored by Julio Cesar
Fix fuzz cache key target name
What changed, and why it matters
This commit fixes a typo in GitHub Actions workflow cache keys. The cache key was referencing a non-existent matrix variable `matrix.target` instead of the correct `matrix.fuzz_target`. This only affects how fuzzing build artifacts are cached in CI and has no security relevance to the Rust Bitcoin library itself or its users.
No security action required. This is a routine CI maintenance fix.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change updates two files—.github/workflows/cron-daily-fuzz.yml and fuzz/generate-files.sh—to use matrix.fuzz_target rather than matrix.target in the GitHub Actions cache key. The matrix.target variable does not exist in the workflow matrix, which is defined with fuzz_target. The practical effect is that cache keys would not vary per fuzz target as intended, potentially causing cache collisions or missed caches between different fuzz jobs. This is a CI infrastructure correctness fix, not a code change.
Changed components
.github/workflows/cron-daily-fuzz.ymlfuzz/generate-files.shInspect captured patch +2 / −3
diff --git a/.github/workflows/cron-daily-fuzz.yml b/.github/workflows/cron-daily-fuzz.yml
index facd2ecf..80b4f53f 100644
--- a/.github/workflows/cron-daily-fuzz.yml
+++ b/.github/workflows/cron-daily-fuzz.yml
@@ -133,7 +133,7 @@ jobs:
~/.cargo/bin
fuzz/target
target
- key: cache-${{ matrix.target }}-${{ hashFiles('**/Cargo.toml','**/Cargo.lock') }}
+ key: cache-${{ matrix.fuzz_target }}-${{ hashFiles('**/Cargo.toml','**/Cargo.lock') }}
- uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # stable
with:
toolchain: '1.74.0'
diff --git a/fuzz/generate-files.sh b/fuzz/generate-files.sh
index 4a4e2e95..c0177f3b 100755
--- a/fuzz/generate-files.sh
+++ b/fuzz/generate-files.sh
@@ -113,7 +113,7 @@ $(for name in $(cargo fuzz list); do echo " $name,"; done)
~/.cargo/bin
fuzz/target
target
- key: cache-\${{ matrix.target }}-\${{ hashFiles('**/Cargo.toml','**/Cargo.lock') }}
+ key: cache-\${{ matrix.fuzz_target }}-\${{ hashFiles('**/Cargo.toml','**/Cargo.lock') }}
- uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # stable
with:
toolchain: '1.74.0'
@@ -147,4 +147,3 @@ $(for name in $(cargo fuzz list); do echo " $name,"; done)
- run: find executed_* -type f -exec cat {} + | sort > executed
- run: cargo fuzz list | sort | diff - executed
EOF
-
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.