Manuel Huber 99356fb7a8 ci: persist genpolicy cache on NVIDIA runners ...

Self-hosted NVIDIA confidential GPU runners receive a clean checkout
for each job, so genpolicy discards useful layer metadata and downloads
the same image layers again.

For CoCo jobs, create a cache under the runner user's home directory
and export GENPOLICY_LAYERS_CACHE_FILE_PATH in the test step that
consumes it. The cache survives workspace cleanup while the environment
variable remains scoped to that process tree.

Use the existing KBS job environment variable in the shell condition so
matrix expressions are not expanded directly into executable code.

Assisted-by: OpenAI Codex <codex@openai.com>
Signed-off-by: Manuel Huber <manuelh@nvidia.com>

2026-07-29 17:39:27 +00:00

..

workflows

ci: persist genpolicy cache on NVIDIA runners

2026-07-29 17:39:27 +00:00

actionlint.yaml

tests: remove metrics tests and workflow

2026-04-23 08:46:12 +02:00

dependabot.yml

ci: Add more crates to dependabot groups

2026-03-23 10:34:27 +00:00

zizmor.yml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00