Write images to GH cache on main & release branches (#8713)

Author: pdabelf5

.github/workflows/build-artifacts.yml

@@ -43,6 +43,10 @@ on:
       image-matrix-nap:
         required: true
         type: string
+      write-to-cache:
+        description: Whether to write built images to cache
+        type: boolean
+        default: false
 
 defaults:
   run:
@@ -208,6 +212,7 @@ jobs:
       branch: ${{ inputs.branch }}
       ic-version: ${{ inputs.ic-version }}
       runner: ${{ inputs.runner }}
+      write-to-cache: ${{ inputs.write-to-cache }}
     permissions:
       contents: read
       actions: read
@@ -235,6 +240,7 @@ jobs:
       full-build: ${{ inputs.force }}
       ic-version: ${{ inputs.ic-version }}
       runner: ${{ inputs.runner }}
+      write-to-cache: ${{ inputs.write-to-cache }}
     permissions:
       contents: read
       id-token: write
@@ -261,6 +267,7 @@ jobs:
       full-build: ${{ inputs.force }}
       ic-version: ${{ inputs.ic-version }}
       runner: ${{ inputs.runner }}
+      write-to-cache: ${{ inputs.write-to-cache }}
     permissions:
       contents: read
       id-token: write # gcr login

.github/workflows/build-oss.yml

@@ -34,6 +34,10 @@ on:
       runner:
         type: string
         default: ubuntu-24.04
+      write-to-cache:
+        required: false
+        type: boolean
+        default: false
 
 defaults:
   run:
@@ -177,7 +181,7 @@ jobs:
         with:
           file: build/Dockerfile
           context: "."
-          cache-to: type=gha,scope=${{ inputs.image }},mode=max
+          cache-to: ${{ inputs.write-to-cache && format('type=gha,scope={0},mode=max', inputs.image) || '' }}
           target: common
           tags: ${{ steps.base_name.outputs.image }}
           platforms: ${{ inputs.platforms }}
@@ -211,7 +215,7 @@ jobs:
           file: build/Dockerfile
           context: "."
           cache-from: type=gha,scope=${{ inputs.image }}
-          cache-to: type=gha,scope=${{ inputs.image }},mode=max
+          cache-to: ${{ inputs.write-to-cache && format('type=gha,scope={0},mode=max', inputs.image) || '' }}
           target: goreleaser${{ inputs.authenticated && '-prebuilt' || '' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}

.github/workflows/build-plus.yml

@@ -40,6 +40,10 @@ on:
       runner:
         type: string
         default: ubuntu-24.04
+      write-to-cache:
+        required: false
+        type: boolean
+        default: false
 
 defaults:
   run:
@@ -200,7 +204,7 @@ jobs:
         with:
           file: build/Dockerfile
           context: "."
-          cache-to: type=gha,scope=${{ inputs.image }}${{ steps.nap_modules.outputs.name != '' && format('-{0}', steps.nap_modules.outputs.name) || '' }},mode=max
+          cache-to: ${{ inputs.write-to-cache && format('type=gha,scope={0}{1},mode=max', inputs.image, steps.nap_modules.outputs.name != '' && format('-{0}', steps.nap_modules.outputs.name) || '' ) || '' }}
           target: common
           tags: ${{ steps.base_name.outputs.image }}
           platforms: ${{ inputs.platforms }}
@@ -239,7 +243,7 @@ jobs:
           file: build/Dockerfile
           context: "."
           cache-from: type=gha,scope=${{ inputs.image }}${{ steps.nap_modules.outputs.name != '' && format('-{0}', steps.nap_modules.outputs.name) || '' }}
-          cache-to: type=gha,scope=${{ inputs.image }}${{ steps.nap_modules.outputs.name != '' && format('-{0}', steps.nap_modules.outputs.name) || '' }},mode=max
+          cache-to: ${{ inputs.write-to-cache && format('type=gha,scope={0}{1},mode=max', inputs.image, steps.nap_modules.outputs.name != '' && format('-{0}', steps.nap_modules.outputs.name) || '' ) || '' }}
           target: ${{ inputs.target }}${{ inputs.authenticated && '-prebuilt' || '' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}

.github/workflows/cache-update.yml

@@ -53,6 +53,7 @@ jobs:
       authenticated: false
       tag: "edge"
       branch: ${{ github.ref }}
+      write-to-cache: true
     permissions:
       contents: read
       actions: read
@@ -78,6 +79,7 @@ jobs:
       authenticated: false
       tag: "edge"
       branch: ${{ github.ref }}
+      write-to-cache: true
     permissions:
       contents: read
       security-events: write
@@ -102,6 +104,7 @@ jobs:
       authenticated: false
       tag: "edge"
       branch: ${{ github.ref }}
+      write-to-cache: true
     permissions:
       contents: read
       security-events: write

.github/workflows/ci.yml

@@ -356,6 +356,7 @@ jobs:
       ic-version: ${{ needs.checks.outputs.ic_version }}
       authenticated: ${{ needs.checks.outputs.forked_workflow != 'true' }}
       runner: ubuntu-24.04
+      write-to-cache: false
     permissions:
       contents: read
       actions: read

.github/workflows/image-promotion.yml

@@ -188,6 +188,7 @@ jobs:
       go-md5: ${{ needs.checks.outputs.go_code_md5 }}
       docker-md5: ${{ needs.checks.outputs.docker_md5 }}
       runner: "ubuntu-24.04-amd64"
+      write-to-cache: true
     secrets: inherit
     permissions:
       contents: read

.github/workflows/release.yml

@@ -112,6 +112,7 @@ jobs:
       go-md5: ${{ needs.variables.outputs.go_code_md5 }}
       docker-md5: ${{ needs.variables.outputs.docker_md5 }}
       runner: "ubuntu-24.04-amd64"
+      write-to-cache: true
     secrets: inherit
     permissions:
       contents: read