build workflow (opencontainers/runtime-spec)
The build workflow from opencontainers/runtime-spec, explained and optimized by Latchkey.
CI health: C - fair
Point runs-on at Latchkey and get run de-duplication, job timeouts, SHA-pinned actions, self-healing for flaky steps, and up to 58% lower cost, applied automatically.
What it does
This is the build workflow from the opencontainers/runtime-spec repository, a real project running GitHub Actions. It is shown here with attribution under its Apache-2.0 license.
Below, Latchkey shows a faster, safer version produced by its optimization engine.
The workflow
name: build
on:
push:
branches:
- main
pull_request:
branches:
- main
jobs:
run:
runs-on: ubuntu-latest
strategy:
matrix:
# our oldest (officially) supported version and the two upstream-supported versions
go: [1.21.x, oldstable, stable]
env:
# avoid downloading any alternate toolchains (https://go.dev/doc/toolchain)
GOTOOLCHAIN: local
steps:
- name: checkout source code
uses: actions/checkout@v4
- name: setup go environment
uses: actions/setup-go@v5
with:
go-version: ${{ matrix.go }}
- name: create go.mod
run: |
# Fix for "cannot find main module" issue
go mod init github.com/opencontainers/runtime-spec
go get -d ./schema/...
- name: run golangci-lint
uses: golangci/golangci-lint-action@v8
with:
version: v2.10
- name: run tests
run: |
set -x
make install.tools
make .govet
make .gitvalidation
make docs
make -C schema test
The same workflow, on Latchkey
Removes redundant runs and caps runaway jobs. Added and changed lines are highlighted.
name: build on: push: branches: - main pull_request: branches: - main concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true jobs: run: timeout-minutes: 30 runs-on: latchkey-small strategy: matrix: # our oldest (officially) supported version and the two upstream-supported versions go: [1.21.x, oldstable, stable] env: # avoid downloading any alternate toolchains (https://go.dev/doc/toolchain) GOTOOLCHAIN: local steps: - name: checkout source code uses: actions/checkout@v4 - name: setup go environment uses: actions/setup-go@v5 with: go-version: ${{ matrix.go }} - name: create go.mod run: | # Fix for "cannot find main module" issue go mod init github.com/opencontainers/runtime-spec go get -d ./schema/... - name: run golangci-lint uses: golangci/golangci-lint-action@v8 with: version: v2.10 - name: run tests run: | set -x make install.tools make .govet make .gitvalidation make docs make -C schema test
What changed
- Run on Latchkey managed runners with one line (
runs-on), which apply the fixes below automatically and self-heal transient failures. This example useslatchkey-small; pick the runner size that fits the job. - Cancel superseded runs when a branch or PR gets a newer push.
- Add a job timeout so a hung step cannot burn hours of runner time.
1 third-party action is referenced by a movable tag. Pin it to the commit SHA (Latchkey resolves and applies this automatically) so a repointed tag cannot change what runs.
This workflow runs 1 job (3 with the matrix expanded) per trigger. On Latchkey the same minutes cost up to 58% less than GitHub-hosted, with zero queue time.