Skip to content
Latchkey

CI workflow (aio-libs/aiojobs)

The CI workflow from aio-libs/aiojobs, explained and optimized by Latchkey.

F

CI health: F - at risk

Point runs-on at Latchkey and get caching, run de-duplication, job timeouts, SHA-pinned actions, self-healing for flaky steps, and up to 58% lower cost, applied automatically.

Grade your own workflow free or run it on Latchkey →
Source: aio-libs/aiojobs.github/workflows/ci.ymlLicense Apache-2.0View source

What it does

This is the CI workflow from the aio-libs/aiojobs repository, a real project running GitHub Actions. It is shown here with attribution under its Apache-2.0 license.

Below, Latchkey shows a faster, safer version produced by its optimization engine.

The workflow

workflow (.yml)
name: CI
on:
  push:
    branches:
      - 'master'
    tags: [ 'v*' ]
  pull_request:
    branches:
      - 'master'
  schedule:
    - cron:  '0 6 * * *'  # Daily 6AM UTC build

jobs:
  docs:
    name: Docs
    runs-on: ubuntu-latest
    steps:
      - name: Checkhout
        uses: actions/checkout@v6
      - name: Setup Python
        uses: actions/setup-python@v6
        with:
          python-version: 3.13
      - uses: actions/cache@v5
        with:
          path: ~/.cache/pip
          key: ${{ runner.os }}-pip-3.13-${{ hashFiles('requirements/*.txt') }}
          restore-keys: |
            ${{ runner.os }}-pip-
      - run: make setup
      - run: make -C docs html SPHINXOPTS="-W -E"

  lint:
    name: Lint
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - name: Checkhout
        uses: actions/checkout@v6
      - name: Setup Python 3.13
        uses: actions/setup-python@v6
        with:
          python-version: 3.13
      - uses: actions/cache@v5
        with:
          path: ~/.cache/pip
          key: ${{ runner.os }}-pip-3.9-${{ hashFiles('requirements/*.txt') }}
          restore-keys: |
            ${{ runner.os }}-pip-
      - run: make setup
      - run: pre-commit run --all-files

  test:
    name: Test
    runs-on: ubuntu-latest
    strategy:
      matrix:
         pyver: ['3.9', '3.10', '3.11', '3.12', '3.13']
         experimental: [false]
         include:
           - pyver: "3.14"
             experimental: true
      fail-fast: true
    continue-on-error: ${{ matrix.experimental }}
    steps:
      - name: Checkhout
        uses: actions/checkout@v6
      - name: Setup Python ${{ matrix.pyver }}
        uses: actions/setup-python@v6
        with:
          python-version: ${{ matrix.pyver }}
          allow-prereleases: true
          cache: 'pip'
          cache-dependency-path: 'requirements/*.txt'
      - name: Install dependencies
        uses: py-actions/py-dependency-install@v4
        with:
          path: requirements/ci.txt
      - name: Run mypy
        run: |
          mypy
      - name: Run tests
        env:
          PYTHONPATH: .
        run: |
          pytest tests
          python -m coverage xml
      - name: Upload coverage
        uses: codecov/codecov-action@v7
        with:
          fail_ci_if_error: true
          token: ${{ secrets.CODECOV_TOKEN }}

  check:  # This job does nothing and is only used for the branch protection
    if: always()
    needs: [docs, lint, test]
    runs-on: ubuntu-latest
    steps:
    - name: Decide whether the needed jobs succeeded or failed
      uses: re-actors/alls-green@release/v1
      with:
        jobs: ${{ toJSON(needs) }}

  deploy:
    name: Deploy
    needs: check
    environment: release
    runs-on: ubuntu-latest
    if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
    steps:
    - name: Checkout
      uses: actions/checkout@v6
    - name: Setup Python
      uses: actions/setup-python@v6
      with:
        python-version: 3.13
    - name: Install dependencies
      run:
        python -m pip install -U pip wheel setuptools build twine
    - name: Build dists
      run: |
        python -m build
    - name: Make Release
      uses: aio-libs/create-release@v1.6.6
      with:
        changes_file: CHANGES.rst
        name: aiojobs
        version_file: aiojobs/__init__.py
        github_token: ${{ secrets.GITHUB_TOKEN }}
        pypi_token: ${{ secrets.PYPI_TOKEN }}
        dist_dir: dist
        fix_issue_regex: "`#(\\d+) <https://github.com/aio-libs/aiojobs/issues/\\1>`"
        fix_issue_repl: "(#\\1)"

The same workflow, on Latchkey

Estimated ~20% faster on cache hits, plus fewer wasted runs and a safer supply chain. Added and changed lines are highlighted.

name: CI
on:
  push:
    branches:
      - 'master'
    tags: [ 'v*' ]
  pull_request:
    branches:
      - 'master'
  schedule:
    - cron:  '0 6 * * *'  # Daily 6AM UTC build
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
 
jobs:
  docs:
    timeout-minutes: 30
    name: Docs
    runs-on: latchkey-small
    steps:
      - name: Checkhout
        uses: actions/checkout@v6
      - name: Setup Python
        uses: actions/setup-python@v6
        with:
          cache: 'pip'
          python-version: 3.13
      - uses: actions/cache@v5
        with:
          path: ~/.cache/pip
          key: ${{ runner.os }}-pip-3.13-${{ hashFiles('requirements/*.txt') }}
          restore-keys: |
            ${{ runner.os }}-pip-
      - run: make setup
      - run: make -C docs html SPHINXOPTS="-W -E"
 
  lint:
    name: Lint
    runs-on: latchkey-small
    timeout-minutes: 5
    steps:
      - name: Checkhout
        uses: actions/checkout@v6
      - name: Setup Python 3.13
        uses: actions/setup-python@v6
        with:
          cache: 'pip'
          python-version: 3.13
      - uses: actions/cache@v5
        with:
          path: ~/.cache/pip
          key: ${{ runner.os }}-pip-3.9-${{ hashFiles('requirements/*.txt') }}
          restore-keys: |
            ${{ runner.os }}-pip-
      - run: make setup
      - run: pre-commit run --all-files
 
  test:
    timeout-minutes: 30
    name: Test
    runs-on: latchkey-small
    strategy:
      matrix:
         pyver: ['3.9', '3.10', '3.11', '3.12', '3.13']
         experimental: [false]
         include:
           - pyver: "3.14"
             experimental: true
      fail-fast: true
    continue-on-error: ${{ matrix.experimental }}
    steps:
      - name: Checkhout
        uses: actions/checkout@v6
      - name: Setup Python ${{ matrix.pyver }}
        uses: actions/setup-python@v6
        with:
          python-version: ${{ matrix.pyver }}
          allow-prereleases: true
          cache: 'pip'
          cache-dependency-path: 'requirements/*.txt'
      - name: Install dependencies
        uses: py-actions/py-dependency-install@v4
        with:
          path: requirements/ci.txt
      - name: Run mypy
        run: |
          mypy
      - name: Run tests
        env:
          PYTHONPATH: .
        run: |
          pytest tests
          python -m coverage xml
      - name: Upload coverage
        uses: codecov/codecov-action@v7
        with:
          fail_ci_if_error: true
          token: ${{ secrets.CODECOV_TOKEN }}
 
  check:  # This job does nothing and is only used for the branch protection
    timeout-minutes: 30
    if: always()
    needs: [docs, lint, test]
    runs-on: latchkey-small
    steps:
    - name: Decide whether the needed jobs succeeded or failed
      uses: re-actors/alls-green@release/v1
      with:
        jobs: ${{ toJSON(needs) }}
 
  deploy:
    timeout-minutes: 30
    name: Deploy
    needs: check
    environment: release
    runs-on: latchkey-small
    if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
    steps:
    - name: Checkout
      uses: actions/checkout@v6
    - name: Setup Python
      uses: actions/setup-python@v6
      with:
        cache: 'pip'
        python-version: 3.13
    - name: Install dependencies
      run:
        python -m pip install -U pip wheel setuptools build twine
    - name: Build dists
      run: |
        python -m build
    - name: Make Release
      uses: aio-libs/create-release@v1.6.6
      with:
        changes_file: CHANGES.rst
        name: aiojobs
        version_file: aiojobs/__init__.py
        github_token: ${{ secrets.GITHUB_TOKEN }}
        pypi_token: ${{ secrets.PYPI_TOKEN }}
        dist_dir: dist
        fix_issue_regex: "`#(\\d+) <https://github.com/aio-libs/aiojobs/issues/\\1>`"
        fix_issue_repl: "(#\\1)"
 

What changed

4 third-party actions are referenced by a movable tag. Pin them to the commit SHA (Latchkey resolves and applies this automatically) so a repointed tag cannot change what runs.

What Latchkey heals here

This workflow has steps that commonly fail on transient issues (network, registries, flaky browsers). On Latchkey managed runners they are detected, retried, and self-healed instead of failing your build:

This workflow runs 5 jobs (9 with the matrix expanded) per trigger. On Latchkey the same minutes cost up to 58% less than GitHub-hosted, with zero queue time.

Actions used in this workflow