[all-commits] [llvm/llvm-project] 66a50e: workflows/release-binaries: Stop using ccache (#12...

[Tom Stellard via All-commits]

  Branch: refs/heads/release/20.x
  Home:   https://github.com/llvm/llvm-project
  Commit: 66a50e246d0f5f0839f2093c1981b3cac44d6df7
      https://github.com/llvm/llvm-project/commit/66a50e246d0f5f0839f2093c1981b3cac44d6df7
  Author: Tom Stellard <tstellar at redhat.com>
  Date:   2025-01-30 (Thu, 30 Jan 2025)

  Changed paths:
    M .github/workflows/release-binaries.yml

  Log Message:
  -----------
  workflows/release-binaries: Stop using ccache (#124415)

Using ccache relies on the GitHub Actions Cache, which may be
susceptible to cache poisoning. See
https://adnanthekhan.com/2024/05/06/the-monsters-in-your-build-cache-github-actions-cache-poisoning/

Even though these attacks may be difficult, it's better to err on the
side of caution and ensure that the build environment for our releases
is as isolated as possible. Additionally, ccache was only being used for
the stage1 build, which is a small part of the overall build, so the
speed up from using it was not that large.

(cherry picked from commit b32e55df246e26f3ea8edc65e92e4c19d2658f0c)



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications