Skip to content

[plan] Recompile workflows to eliminate cache dir obfuscation #12938

@github-actions

Description

@github-actions

Objective

Run make recompile to regenerate all workflow .lock.yml files with the updated compiler, eliminating obfuscation patterns in cache directory environment variables.

Context

From discussion #12933: After fixing the compiler to avoid wrapping static values in ${{ }}, we need to regenerate all 147 workflow files to apply the fix.

Expected Change:

# Before
env:
  GH_AW_CACHE_DIR: ${{ '/tmp/gh-aw/cache-memory/' }}
  GH_AW_CACHE_DESCRIPTION: ${{ '' }}

# After
env:
  GH_AW_CACHE_DIR: /tmp/gh-aw/cache-memory/
  GH_AW_CACHE_DESCRIPTION: ''

Prerequisites

This task depends on:

  1. ✅ Compiler updated to detect static values (Issue rejig docs #1)
  2. ✅ Tests pass (Issue Add workflow: githubnext/agentics/weekly-research #2)

Approach

  1. Ensure compiler is built: make build
  2. Run: make recompile
  3. Review a sample of changed files to verify:
    • Cache dir values no longer wrapped
    • Other static values cleaned up
    • Dynamic values still wrapped correctly
  4. Check git diff to see scope of changes

Expected Impact

Workflows Affected: 63 workflows with obfuscation patterns
Lines Changed: ~126 environment variable declarations

Sample workflows to spot-check:

  • agent-persona-explorer.lock.yml
  • audit-workflows.lock.yml
  • daily-code-metrics.lock.yml
  • workflow-generator.lock.yml

Validation

# Check for remaining obfuscation in cache dirs
grep -r "GH_AW_CACHE_DIR: \${{" .github/workflows/*.lock.yml

# Should return no matches (exit code 1)

Acceptance Criteria

  • make build completes successfully
  • make recompile regenerates all workflow files
  • Cache dir values no longer have ${{ }} wrapper
  • Dynamic values still properly wrapped
  • Git diff shows expected changes (static values cleaned)
  • No compilation errors

Related

Discussion #12933 - Static Analysis Report (Item 2: Obfuscation)

AI generated by Plan Command for discussion #12933

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions