internal/ci: cache staticcheck via nscloud-cache-action

Rather than staticcheck-action's built-in actions/cache caching,
which is slower and inconsistent.

Signed-off-by: Daniel Martí <[email protected]>
Change-Id: Ia9334144a53c7805ce21e1267ac779da628dda57
Reviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1217827
TryBot-Result: CUEcueckoo <[email protected]>
Reviewed-by: Paul Jolly <[email protected]>

Author: mvdan

.github/workflows/trybot.yaml

@@ -86,6 +86,7 @@ jobs:
         uses: namespacelabs/nscloud-cache-action@v1
         with:
           cache: go
+          path: ${{ runner.temp }}/staticcheck
       - if: |-
           github.repository == 'cue-lang/cue' && (((github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/heads/release-branch.')) && (! (contains(github.event.head_commit.message, '
           Dispatch-Trailer: {"type":"')))) || (github.ref == 'refs/heads/ci/test'))
@@ -145,6 +146,7 @@ jobs:
         with:
           version: "2025.1"
           install-go: false
+          use-cache: false
       - if: (matrix.go-version == '1.24.x' && matrix.runner == 'namespace-profile-ubuntu-24-04-amd64-8x16')
         name: Check all git tags are available
         run: |-

internal/ci/base/github.cue

@@ -159,9 +159,16 @@ curlGitHubAPI: {
 setupGoActionsCaches: [
 	// Our runner profiles on Namespace are already configured to only update
 	// the cache when they run from one of the protected branches.
+	// We cache for Go (GOCACHE and GOMODCACHE) and for staticcheck,
+	// noting that staticcheck-action puts STATICCHECK_CACHE under runner.temp.
 	githubactions.#Step & {
 		uses: "namespacelabs/nscloud-cache-action@v1"
-		with: cache: "go"
+		with: {
+			cache: "go"
+			path: """
+				${{ runner.temp }}/staticcheck
+				"""
+		}
 	},
 
 	// All tests on protected branches should skip the test cache,

internal/ci/github/trybot.cue

@@ -185,6 +185,7 @@ workflows: trybot: _repo.bashWorkflow & {
 			with: {
 				version:      "2025.1" // Pin a version for determinism.
 				"install-go": false    // We install Go ourselves.
+				"use-cache":  false    // We use a volume cache instead.
 			}
 		},
 	]