mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-07-31 19:16:29 +00:00
96c08cf3c5
Swap type=gha buildx cache for type=registry against us-central1-docker.pkg.dev/.../ci-cache — same region as the ARC runners, so layer blobs stop round-tripping to GitHub's cache CDN on every build/rerun. Auth is keyless both ways: reads ride the runner pod's GKE Workload Identity (no login needed for cache-from); writes exchange the workflow's GitHub OIDC token via WIF (google-github-actions/auth, fork-guarded — fork PRs build cache-cold exactly like type=gha). publish keeps its own unconditional WIF auth (trusted contexts only). Infra: hermes-agent-ci-infra ef8dfb2. |
||
|---|---|---|
| .. | ||
| ci.yml | ||
| contributor-check.yml | ||
| deploy-site.yml | ||
| docker-lint.yml | ||
| docker.yml | ||
| docs-site-checks.yml | ||
| e2e-desktop.yml | ||
| history-check.yml | ||
| infographic-check.yml | ||
| js-autofix.yml | ||
| js-tests.yml | ||
| label-rerun.yml | ||
| lint.yml | ||
| lockfile-diff.yml | ||
| osv-scanner.yml | ||
| publish-e2e-evidence.yml | ||
| review-labels.yml | ||
| skills-index-freshness.yml | ||
| skills-index.yml | ||
| supply-chain-audit.yml | ||
| tests.yml | ||
| uv-lockfile-check.yml | ||