Skip to content
This repository was archived by the owner on Aug 28, 2026. It is now read-only.

[team-devex#546] Swap actions/cache for step-security/runs-on-cache - #30

Closed
shpendnilafresha wants to merge 1 commit into
masterfrom
chore/a25-consolidate-cache
Closed

[team-devex#546] Swap actions/cache for step-security/runs-on-cache#30
shpendnilafresha wants to merge 1 commit into
masterfrom
chore/a25-consolidate-cache

Conversation

@shpendnilafresha

Copy link
Copy Markdown

Swaps actions/cache (and its /restore, /save variants where present) for step-security/runs-on-cache, the org-canonical caching action (already 209 use sites across 50+ repos, all on this exact pin, v5.0.7).

Why this is safe:

  • Drop-in replacement for actions/cache@v5 — all official options supported, with: blocks are untouched by this PR.
  • Transparent fallback: on runs-on runners it uses the dedicated S3 cache bucket (faster, no size limit); on GitHub-hosted runners with no bucket it transparently behaves like actions/cache. Per upstream: "you can switch between RunsOn runners and official GitHub runners with no change."
  • On runs-on runners this also stops paying GitHub-cache egress.

Part of the A25.2 consolidation pass: https://github.com/freshaengineering/team-devex/issues/546 (parent: https://github.com/freshaengineering/team-devex/issues/505). Full evidence: https://github.com/freshaengineering/team-devex/issues/504#issuecomment-5168144698

🤖 Generated with Claude Code

Drop-in replacement (same inputs/outputs, actions/cache@v5 interface):
S3-backed cache on runs-on runners, transparent fallback to the default
GitHub cache backend when no bucket is available, so GitHub-hosted jobs
are unaffected. Pin matches the org-wide canonical (v5.0.7), already
used at 209 sites across 50+ repos. with: blocks are unchanged.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedstep-security/​runs-on-cache@​c5b0cba15d05488ebc630ad8d1e95b3d9b35ac7366100100100100

View full report

@shpendnilafresha

shpendnilafresha commented Aug 10, 2026

Copy link
Copy Markdown
Author

addressed here #31

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants