CI workflow (angr/cle)
The CI workflow from angr/cle, explained and optimized by Latchkey.
CI health: C - fair
Run this on Latchkey for self-healing, caching, and up to 58% lower cost.
Grade your own workflow free or run it on Latchkey →What it does
This is the CI workflow from the angr/cle repository, a real project running GitHub Actions. It is shown here with attribution under its BSD-2-Clause license.
Below, Latchkey shows a faster, safer version produced by its optimization engine.
The workflow
name: CI
on:
push:
branches:
- master
pull_request:
workflow_dispatch:
jobs:
ci:
uses: angr/ci-settings/.github/workflows/angr-ci.yml@master
test:
name: Test ${{ matrix.os }}
runs-on: ${{ matrix.os }}
strategy:
matrix:
os: [windows-2022, macos-15]
steps:
- uses: actions/checkout@v6
with:
path: cle
- uses: actions/checkout@v6
with:
repository: angr/binaries
path: binaries
- name: Install the latest version of uv
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
- uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1
if: runner.os == 'Windows'
- name: Sync dependencies with uv
run: uv sync --directory cle --python python3.12 --group testing
- name: Run tests
run: uv --directory cle run pytest -n auto
The same workflow, on Latchkey
Removes redundant runs and caps runaway jobs. Added and changed lines are highlighted.
name: CI on: push: branches: - master pull_request: workflow_dispatch: concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true jobs: ci: timeout-minutes: 30 uses: angr/ci-settings/.github/workflows/angr-ci.yml@master test: timeout-minutes: 30 name: Test ${{ matrix.os }} runs-on: ${{ matrix.os }} strategy: matrix: os: [windows-2022, macos-15] steps: - uses: actions/checkout@v6 with: path: cle - uses: actions/checkout@v6 with: repository: angr/binaries path: binaries - name: Install the latest version of uv uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1 if: runner.os == 'Windows' - name: Sync dependencies with uv run: uv sync --directory cle --python python3.12 --group testing - name: Run tests run: uv --directory cle run pytest -n auto
What changed
- Cancel superseded runs when a branch or PR gets a newer push.
- Add a job timeout so a hung step cannot burn hours of runner time.
1 third-party action is referenced by a movable tag. Pin it to the commit SHA (Latchkey resolves and applies this automatically) so a repointed tag cannot change what runs.
This workflow runs 2 jobs (3 with the matrix expanded) per trigger. On Latchkey the same minutes cost up to 58% less than GitHub-hosted, with zero queue time.