rasterstate/cache-action
2
0
Fork 0
Code Issues Pull requests Releases Activity Actions

Fail closed when cache digest sidecar is missing #10

Merged
stephen merged 1 commit from feat/cache-restore-integrity into main 2026-06-22 20:20:50 +00:00
Conversation 0 Commits 1 Files changed 5 +17 -60
stephen commented 2026-06-22 20:07:56 +00:00
Owner
Copy link

Restore already confines archive entries to requested cache paths (#3) and verifies archive sidecars before extraction (#2). This makes the digest sidecar mandatory so a cache object with no integrity record is refused before tar runs.

Refs #2
Refs #3

What changed

  • Removed the missing-digest restore fallback and deleted the RASTER_CACHE_REQUIRE_DIGEST opt-in surface.
  • Updated the digest test so a missing sidecar fails closed with nothing extracted.
  • Updated README and SECURITY.md to document mandatory sidecar verification.

Testing

  • focused restore digest and confinement tests
  • npm test
  • npm run check
Restore already confines archive entries to requested cache paths (#3) and verifies archive sidecars before extraction (#2). This makes the digest sidecar mandatory so a cache object with no integrity record is refused before tar runs. Refs #2 Refs #3 **What changed** - Removed the missing-digest restore fallback and deleted the `RASTER_CACHE_REQUIRE_DIGEST` opt-in surface. - Updated the digest test so a missing sidecar fails closed with nothing extracted. - Updated README and SECURITY.md to document mandatory sidecar verification. **Testing** - focused restore digest and confinement tests - npm test - npm run check
Fail closed when cache digest sidecar is missing
All checks were successful
test / e2e (pull_request) Successful in 6s
Details
test / unit (pull_request) Successful in 23s
Details
test / e2e-post-save (pull_request) Successful in 22s
Details
84296bceab
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
backlog
Accepted but not scheduled

  
blocked
Blocked or stalled waiting on external progress

  
converted
Converted into tracked work

  
opportunity
Potential product or business opportunity

  
p1
Priority 1

  
p2
Priority 2

  
p3
Priority 3

  
parked
Paused intentionally until later

No labels
backlog
blocked
converted
opportunity
p1
p2
p3
parked
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
rasterstate/cache-action!10
No description provided.