Harden sccache sidecar fallback #9

Merged

stephen merged 1 commit from harden-sccache-sidecar-fallback into main

2026-08-19 20:21:27 +00:00

stephen commented

2026-08-19 20:15:53 +00:00

Owner

Summary

Make missing checksum sidecars recoverable when an explicit sha256 input or built-in SHA-256 pin is available.
Print the action ref, requested sccache version, and failing URL when tarball or checksum sidecar fetches fail.
Run tests on concrete release tags and document that v1 moves only after the concrete tag workflow is green.

Verification

make test: 33/33 passed
git diff --check
make lint attempted: shellcheck and shfmt completed, but local actionlint is not installed.

404 simulation

Added checksum: sidecar 404 falls back to sha256 input, which mocks curl exiting 22 for the .sha256 URL and still installs after verifying the explicit SHA.
Added checksum: sidecar 404 falls back to built-in pin, which mocks curl exiting 22 for a mirror .sha256 URL and verifies that the built-in-pin fallback path is used and fails closed on a fixture mismatch.

## Summary - Make missing checksum sidecars recoverable when an explicit sha256 input or built-in SHA-256 pin is available. - Print the action ref, requested sccache version, and failing URL when tarball or checksum sidecar fetches fail. - Run tests on concrete release tags and document that v1 moves only after the concrete tag workflow is green. ## Verification - make test: 33/33 passed - git diff --check - make lint attempted: shellcheck and shfmt completed, but local actionlint is not installed. ## 404 simulation - Added checksum: sidecar 404 falls back to sha256 input, which mocks curl exiting 22 for the .sha256 URL and still installs after verifying the explicit SHA. - Added checksum: sidecar 404 falls back to built-in pin, which mocks curl exiting 22 for a mirror .sha256 URL and verifies that the built-in-pin fallback path is used and fails closed on a fixture mismatch.

stephen added 1 commit

2026-08-19 20:15:53 +00:00

Harden sccache sidecar fallback

test / integration (pull_request) Successful in 5s

Details

test / unit (pull_request) Successful in 7s

Details

test / install (v0.14.0) (pull_request) Successful in 6s

Details

test / install (v0.15.0) (pull_request) Successful in 7s

Details

test / reinstall-on-version-change (pull_request) Successful in 6s