Jordan Harband 5c05fb659c [actions] cache container images, verified against digests looked up live ...

Each container job now looks up the image's index, manifest,
and config digests from the registry,
keys an `actions/cache` entry on the config digest,
and only uses a cached image if its ID matches one of those digests;
otherwise it is discarded and the image is pulled (with retries) instead.
A poisoned or stale cache entry can therefore never be used,
and a cache hit needs only a couple of small manifest requests,
so this scales regardless of pull rate limits.

2026-10-09 14:14:20 -07:00

..

apt-install.sh

[actions] never let an apt install wait on a prompt

2026-10-08 11:10:27 -07:00

docker-image.sh

[actions] cache container images, verified against digests looked up live

2026-10-09 14:14:20 -07:00