Skip to content

Commit a552364

Browse files
feat: augments the list of cache-aware action in cache-audit (#346)
1 parent 6e4c340 commit a552364

File tree

1 file changed

+53
-0
lines changed

1 file changed

+53
-0
lines changed

Diff for: src/audit/cache_poisoning.rs

+53
Original file line numberDiff line numberDiff line change
@@ -126,10 +126,63 @@ static KNOWN_CACHE_AWARE_ACTIONS: LazyLock<Vec<CacheAwareAction>> = LazyLock::ne
126126
control_value: CacheControlValue::Boolean,
127127
caching_by_default: false,
128128
}),
129+
// https://github.com/mlugg/setup-zig/blob/main/action.yml
130+
CacheAwareAction::Configurable(ControllableCacheAction {
131+
uses: Uses::from_step("mlugg/setup-zig").unwrap(),
132+
control_input: CacheControlInput::OptIn("use-cache"),
133+
control_value: CacheControlValue::Boolean,
134+
caching_by_default: true,
135+
}),
136+
// https://github.com/oven-sh/setup-bun/blob/main/action.yml
137+
CacheAwareAction::Configurable(ControllableCacheAction {
138+
uses: Uses::from_step("oven-sh/setup-bun").unwrap(),
139+
control_input: CacheControlInput::OptOut("no-cache"),
140+
control_value: CacheControlValue::Boolean,
141+
caching_by_default: true,
142+
}),
143+
// https://github.com/DeterminateSystems/magic-nix-cache-action/blob/main/action.yml
144+
CacheAwareAction::Configurable(ControllableCacheAction {
145+
uses: Uses::from_step("DeterminateSystems/magic-nix-cache-action").unwrap(),
146+
control_input: CacheControlInput::OptIn("use-gha-cache"),
147+
control_value: CacheControlValue::Boolean,
148+
caching_by_default: true,
149+
}),
150+
// https://github.com/graalvm/setup-graalvm/blob/main/action.yml
151+
CacheAwareAction::Configurable(ControllableCacheAction {
152+
uses: Uses::from_step("graalvm/setup-graalvm").unwrap(),
153+
control_input: CacheControlInput::OptIn("cache"),
154+
control_value: CacheControlValue::String,
155+
caching_by_default: false,
156+
}),
157+
// https://github.com/gradle/actions/blob/main/setup-gradle/action.yml
158+
CacheAwareAction::Configurable(ControllableCacheAction {
159+
uses: Uses::from_step("gradle/actions/setup-gradle").unwrap(),
160+
control_input: CacheControlInput::OptOut("cache-disabled"),
161+
control_value: CacheControlValue::Boolean,
162+
caching_by_default: true,
163+
}),
164+
// https://github.com/docker/setup-buildx-action/blob/master/action.yml
165+
CacheAwareAction::Configurable(ControllableCacheAction {
166+
uses: Uses::from_step("docker/setup-buildx-action").unwrap(),
167+
control_input: CacheControlInput::OptIn("cache-binary"),
168+
control_value: CacheControlValue::Boolean,
169+
caching_by_default: true,
170+
}),
171+
// https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/action.yml
172+
CacheAwareAction::Configurable(ControllableCacheAction {
173+
uses: Uses::from_step("actions-rust-lang/setup-rust-toolchain").unwrap(),
174+
control_input: CacheControlInput::OptIn("cache"),
175+
control_value: CacheControlValue::Boolean,
176+
caching_by_default: true,
177+
}),
129178
// https://github.com/Mozilla-Actions/sccache-action/blob/main/action.yml
130179
CacheAwareAction::NotConfigurable(
131180
Uses::from_step("Mozilla-Actions/sccache-action").unwrap(),
132181
),
182+
// https://github.com/nix-community/cache-nix-action/blob/main/action.yml
183+
CacheAwareAction::NotConfigurable(
184+
Uses::from_step("nix-community/cache-nix-action").unwrap(),
185+
),
133186
]
134187
});
135188

0 commit comments

Comments
 (0)