wolfssl/.github/workflows
Tobias Frauenschläger 9a788724d7 Fix CI flakes from ccache saturation and stale schedule estimates
pq-all and trackmemory restore a seed ccache that already sits at its
cap, so every object a run compiles evicts a seeded one that is still
needed. Both reported a cache 100% full with over 200 cleanups and a
43-44% hit rate, and their configs took 3-5x their warm time. That left
pq-all shards finishing at 23-26 min against a 30 min limit: a healthy
shard passed with 5.6 min to spare, so any hiccup ahead of the build
took the job down. One did, twice, when the prebuilt deb image came up
short and the dependency step fell back to apt for 9.7 min - the only
two jobs out of 47 whose install ran past 2 min are the only two that
timed out. Size both caches to hold the seeded objects and a run's own
alongside them, and widen the limits so a slow install is survivable.

Raise the trackmemory limit as well, for a different reason: its
wolfEntropy configs have overrun it outright, once with six configs
done inside 8 min while all-wolfentropy ran on for another 32. That is
a stall rather than a slow run - 91 jobs have a 17.2 min median and a
17.9 min p90, with nothing between 18 min and the cap - so the higher
limit is headroom, not a fix. It costs nothing on a healthy run.

Recalibrate "minutes", which drives longest-first scheduling and shard
balancing. pq-all and fips-dev-no-post had drifted several-fold in both
directions: two frodokem cross-builds were declared at 4 min but take
0.3, so the pool kept scheduling them first as its longest work. pq-all
is calibrated from runs whose ccache actually hit, which the resized
cache makes the normal case; a value read off a cold run makes every
warm run warn instead. os-check-linux was already calibrated cold and
correct, so only its three genuine outliers change.

Both config lists are re-sorted to restore the documented descending
order, so most of their diff is a mechanical move rather than a value
change. Shard totals come out at 29.4/29.6 for pq-all and 76.9-77.7
across the four os-check shards.
2026-08-06 18:56:15 +02:00
..
cross-library Add workflows to check other wolfSSL products still build 2026-07-08 16:39:00 -06:00
disabled .github: bump JavaScript actions to Node.js 24 runtimes 2026-06-15 18:09:04 +00:00
hostap-files
ada.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
advisory.yml sbom: address advisory/SBOM review findings 2026-07-23 21:51:26 -07:00
aesgcm-siv.yml AES asm: Add GCM 8-bit table, fixes 2026-08-04 17:48:14 +10:00
arduino-cores-image.yml CI: move Arduino cores from actions/cache to ghcr bundles 2026-06-17 09:29:48 +00:00
arduino.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
async-examples.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
async.yml Keep the record size probe clear of a suspended build 2026-08-05 20:39:57 +02:00
atecc608-sim.yml CI: offload ccache/apt/buildx caches off the GitHub Actions cache 2026-06-15 22:36:35 +00:00
bind.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
check-cert-chains.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
check-headers.yml CI: offload ccache/apt/buildx caches off the GitHub Actions cache 2026-06-15 22:36:35 +00:00
check-source-text.yml CI: catch workflows that GitHub silently fails to load 2026-08-03 17:05:29 +02:00
ci-deps-image.yml CI: harden ci-deps-image downloads against stalled mirror connections 2026-06-18 10:52:52 +00:00
cmake-autoconf.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
cmake.yml Merge pull request #10827 from danielinux/falcon-native 2026-07-23 21:17:10 +10:00
codespell.yml .github/workflows/codespell.yml: add *.bin to skip list. 2026-08-05 13:53:46 -05:00
coverity-scan-fixes.yml .github: bump JavaScript actions to Node.js 24 runtimes 2026-06-15 18:09:04 +00:00
cross-library.yml Add workflows to check other wolfSSL products still build 2026-07-08 16:39:00 -06:00
cross-wolfclu.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
cross-wolfmqtt.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
cross-wolfpkcs11.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
cross-wolfprovider.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
cross-wolfssh.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
cross-wolftpm.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
cryptocb-only.yml Merge pull request #10832 from padelsbach/curve25519-cryptocb-only 2026-07-22 17:35:55 -06:00
curl.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
cyrus-sasl.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
disable-pk-algs.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
docker-Espressif.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
docker-OpenWrt.yml CI: offload ccache/apt/buildx caches off the GitHub Actions cache 2026-06-15 22:36:35 +00:00
emnet-nonblock.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
falcon-interop.yml Falcon: CI-test every selectable backend, not just the default 2026-07-22 09:52:27 +02:00
fil-c.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
fips-dev-no-post.yml Fix CI flakes from ccache saturation and stale schedule estimates 2026-08-06 18:56:15 +02:00
freertos-mem-track.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
gencertbuf.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
grpc.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
haproxy.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
hostap-vm.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
intelasm-c-fallback.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
ipmitool.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
jwt-cpp.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
krb5.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
libspdm.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
libssh2.yml Merge pull request #10969 from Frauschi/ci_flakyness_fixes 2026-07-24 10:41:54 +10:00
libvncserver.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
linuxkm.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
mbedtls.sh
mbedtls.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
membrowse-comment.yml
membrowse-onboard.yml CI: install all apt deps from ghcr bundles 2026-06-16 15:22:36 +00:00
membrowse-report.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
membrowse-zephyr.yml F-6279 - Pin membrowse-action to commit SHA and drop persisted creds in zephyr report workflow 2026-06-25 15:07:33 -07:00
memcached.sh
memcached.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
mono.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
mosquitto.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
msmtp.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
msys2.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
multi-arch.yml CI: move parallel-make-check config lists into .github/configs 2026-08-03 17:05:29 +02:00
multi-compiler.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
net-snmp.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
nginx.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
no-malloc.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
nss.sh
nss.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
ntp.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
ocsp.yml Make OCSP stapling request ownership explicit 2026-07-31 22:02:42 +02:00
openldap.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
openssh.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
openssl-ech.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
opensslcoexist.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
openvpn.yml Merge pull request #10896 from julek-wolfssl/julek-dev/openvpn-set0-crls 2026-07-24 10:18:40 +10:00
os-check.yml CI: raise the os-check linux timeout and allow seeding on demand 2026-08-03 17:05:29 +02:00
packaging.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
pam-ipmi.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
pic32mz-sim.yml CI: run PIC32MZ simulator test on ready_for_review 2026-06-18 14:21:35 +00:00
pq-all.yml Fix CI flakes from ccache saturation and stale schedule estimates 2026-08-06 18:56:15 +02:00
pr-commit-check.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
psk.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
puf.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
python.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
retrigger-prb-on-ready.yml .github: bump JavaScript actions to Node.js 24 runtimes 2026-06-15 18:09:04 +00:00
rng-tools.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
rtl8735b.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
rust-wrapper.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
sbom.yml sbom: drop liboqs dependency support (removed from wolfSSL) 2026-07-23 22:32:50 -07:00
se050-sim.yml SE050: skip peer key upload on applet 7.2 ECDH path (peer review) 2026-08-04 11:42:20 +01:00
smallStackSize.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
smoke-test.yml CI: move parallel-make-check config lists into .github/configs 2026-08-03 17:05:29 +02:00
socat.yml Merge pull request #10931 from julek-wolfssl/socat-ci-hang-fix 2026-07-24 10:45:20 +10:00
softhsm.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
sssd.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
stm32-sim.yml CI: offload ccache/apt/buildx caches off the GitHub Actions cache 2026-06-15 22:36:35 +00:00
stsafe-a120-sim.yml CI: offload ccache/apt/buildx caches off the GitHub Actions cache 2026-06-15 22:36:35 +00:00
stunnel.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
symbol-prefixes.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
threadx.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
tinytls13.yml Move tinytls13 smoke test to examples/tls13/tls13_memio.c and restore WOLFSSL_MLKEM_DYNAMIC_KEYS macro 2026-06-25 14:32:33 -07:00
tls-anvil.yml CI: offload ccache/apt/buildx caches off the GitHub Actions cache 2026-06-15 22:36:35 +00:00
trackmemory.yml Fix CI flakes from ccache saturation and stale schedule estimates 2026-08-06 18:56:15 +02:00
tropic01-sim.yml CI: offload ccache/apt/buildx caches off the GitHub Actions cache 2026-06-15 22:36:35 +00:00
watcomc.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
win-csharp-test.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
windows-arm64.yml Merge pull request #10947 from night1rider/benchmark-msvc-arm64 2026-07-31 14:23:26 -07:00
wolfCrypt-Wconversion.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
wolfboot-integration.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
wolfsm.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
workflow-health.yml CI: catch workflows that GitHub silently fails to load 2026-08-03 17:05:29 +02:00
xcode.yml 6707 - Add least-privilege permissions block to PR-triggered workflows 2026-07-16 09:39:57 -07:00
zephyr-4.x.yml Zephyr: wolfSSL module support for the wolfPSA provider and native RTOS use 2026-08-04 20:53:36 +02:00
zephyr.yml Zephyr: wolfSSL module support for the wolfPSA provider and native RTOS use 2026-08-04 20:53:36 +02:00