What changed, and why it matters
This commit removes leftover configuration that skipped certain GitHub Actions jobs when the workflow was run locally using a tool called 'act'. It is a routine cleanup with no effect on the security of the Bitcoin library code users actually run.
No security action needed. Reviewers may verify that CI still passes and that removing the `act` guards does not cause unintended job runs or resource usage in local testing setups.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit deletes if: ${{ !github.event.act }} guards from CI workflow jobs and removes the bitcoin/contrib/act/event.json fixture used by the nektos/act local GitHub Actions runner. These guards previously prevented fuzz and cross-compilation jobs from executing under act. Removing them only changes CI behavior, not the shipped Rust code, dependencies, or build outputs.
Changed components
.github/workflows/cron-daily-fuzz.yml.github/workflows/rust.ymlbitcoin/contrib/act/event.jsonfuzz/generate-files.shInspect captured patch +0 / −8
diff --git a/.github/workflows/cron-daily-fuzz.yml b/.github/workflows/cron-daily-fuzz.yml
index c874d232..338547cd 100644
--- a/.github/workflows/cron-daily-fuzz.yml
+++ b/.github/workflows/cron-daily-fuzz.yml
@@ -11,7 +11,6 @@ permissions: {}
jobs:
fuzz:
- if: ${{ !github.event.act }}
runs-on: ubuntu-24.04
permissions:
contents: read
@@ -150,7 +149,6 @@ jobs:
path: executed_${{ matrix.fuzz_target }}
verify-execution:
- if: ${{ !github.event.act }}
needs: fuzz
runs-on: ubuntu-24.04
permissions:
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index b049b06e..d6d5b642 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -106,7 +106,6 @@ jobs:
Cross:
name: Cross test - stable toolchain
- if: ${{ !github.event.act }}
runs-on: ubuntu-24.04
permissions:
contents: read
diff --git a/bitcoin/contrib/act/event.json b/bitcoin/contrib/act/event.json
deleted file mode 100644
index 43c2f0eb..00000000
--- a/bitcoin/contrib/act/event.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
- "act": true
-}
diff --git a/fuzz/generate-files.sh b/fuzz/generate-files.sh
index 4a4e2e95..c34a9bf6 100755
--- a/fuzz/generate-files.sh
+++ b/fuzz/generate-files.sh
@@ -90,7 +90,6 @@ permissions: {}
jobs:
fuzz:
- if: \${{ !github.event.act }}
runs-on: ubuntu-24.04
permissions:
contents: read
@@ -131,7 +130,6 @@ $(for name in $(cargo fuzz list); do echo " $name,"; done)
path: executed_\${{ matrix.fuzz_target }}
verify-execution:
- if: \${{ !github.event.act }}
needs: fuzz
runs-on: ubuntu-24.04
permissions:
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.