[all-commits] [llvm/llvm-project] b32e55: workflows/release-binaries: Stop using ccache (#12...

[Tom Stellard via All-commits]

  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: b32e55df246e26f3ea8edc65e92e4c19d2658f0c
      https://github.com/llvm/llvm-project/commit/b32e55df246e26f3ea8edc65e92e4c19d2658f0c
  Author: Tom Stellard <tstellar at redhat.com>
  Date:   2025-01-29 (Wed, 29 Jan 2025)

  Changed paths:
    M .github/workflows/release-binaries.yml

  Log Message:
  -----------
  workflows/release-binaries: Stop using ccache (#124415)

Using ccache relies on the GitHub Actions Cache, which may be
susceptible to cache poisoning. See
https://adnanthekhan.com/2024/05/06/the-monsters-in-your-build-cache-github-actions-cache-poisoning/

Even though these attacks may be difficult, it's better to err on the
side of caution and ensure that the build environment for our releases
is as isolated as possible. Additionally, ccache was only being used for
the stage1 build, which is a small part of the overall build, so the
speed up from using it was not that large.



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications