[releng master] gromit: sync templates

[probelabs]

Auto-generated from gromit templates by policy sync.

[sentinelone-cnapp-eu1]

SentinelOne CNS Hardcoded Secret Detector
✅ Congratulations, your code is safe

SentinelOne CNS is a cloud-agnostic, agentless CSPM & CWPP solution that continuously detects and prevents vulnerabilities that have the highest probability of being exploited in Azure, AWS, Google Cloud, and Kubernetes.

[github-actions]

zizmor findings

Severity	Count
High	27
Medium	68
Low	8
Info	24

Full details are in the workflow run.

[github-actions]

🚨 Jira Linter Failed

Commit: 439d033
Failed at: 2026-09-11 06:11:56 UTC

The Jira linter failed to validate your PR. Please check the error details below:

🔍 Click to view error details

failed to validate branch and PR title rules: neither branch name 'releng/master' nor PR title '[releng master] gromit: sync templates' contains a valid Jira ticket ID (e.g., ABC-123)

Next Steps

• Ensure your branch name contains a valid Jira ticket ID (e.g., ABC-123)
• Verify your PR title matches the branch's Jira ticket ID
• Check that the Jira ticket exists and is accessible

---

This comment will be automatically deleted once the linter passes.

[probelabs]

This PR updates the GitHub Actions release.yml workflow to refine the caching mechanism for Go modules.

Files Changed Analysis

The change is confined to a single file, .github/workflows/release.yml, with minor additions and deletions. The key modification is making the Go module cache key more specific.

Architecture & Impact Assessment

• What this PR accomplishes: It improves the reliability of the CI/CD release pipeline by preventing potential cache collisions between different jobs or workflows.
• Key technical changes introduced: The key and restore-keys for the actions/cache step in the goreleaser job have been changed from a generic prefix (${{ runner.os }}-go-) to a more specific one (${{ runner.os }}-go-tyk-goreleaser-).
• Affected system components: This change affects only the CI/CD infrastructure, specifically the caching behavior of the release workflow. It has no impact on the application's runtime code.

Scope Discovery & Context Expansion

The PR title and description indicate this change is part of an automated synchronization from a central template management tool ("gromit"). The core issue addressed is that the previous, broad cache key could inadvertently match other Go-related caches (e.g., for different projects like tyk-pump), leading to incorrect cache restoration. This fix scopes the cache specifically to the goreleaser job within the tyk project, preventing such conflicts. This pattern may need to be applied to other workflows in this repository or other repositories that share the same template source.

Metadata

• Review Effort: 1 / 5
• Primary Label: chore

---

Powered by Visor from Probelabs

Last updated: 2026-09-11T06:12:31.520Z | Triggered by: pr_opened | Commit: 439d033

💡 TIP: You can chat with Visor using /visor ask <your question>

[probelabs]

✅ Security Check Passed

No security issues found – changes LGTM.

✅ Architecture Check Passed

No architecture issues found – changes LGTM.

✅ Security Check Passed

No security issues found – changes LGTM.

\n\n

✅ Architecture Check Passed

No architecture issues found – changes LGTM.

\n\n \n\n

✅ Quality Check Passed

No quality issues found – changes LGTM.

---

Powered by Visor from Probelabs

Last updated: 2026-09-11T06:12:28.149Z | Triggered by: pr_opened | Commit: 439d033

💡 TIP: You can chat with Visor using /visor ask <your question>

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud