ci(alloy): pull/push ghcr cache for checks

Author: lmeyerov

.github/workflows/ci.yml

@@ -138,9 +138,20 @@ jobs:
       with:
         lfs: true
 
+    - name: Login to GitHub Container Registry
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Pre-pull Alloy image cache
+      run: |
+        docker pull ghcr.io/graphistry/alloy6:6.2.0 || true
+
     - name: Run Alloy checks (full scopes)
       run: |
-        FULL=1 bash alloy/check_fbf_where.sh
+        ALLOY_PUSH=1 FULL=1 bash alloy/check_fbf_where.sh
 
   test-minimal-python:
     needs: [changes, python-lint-types]

alloy/check_fbf_where.sh

@@ -3,14 +3,41 @@ set -euo pipefail
 
 HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ALS="/work/gfql_fbf_where.als"
-IMAGE="local/alloy6:latest"
+IMAGE="${ALLOY_IMAGE:-ghcr.io/graphistry/alloy6:6.2.0}"
+LOCAL_FALLBACK_IMAGE="${ALLOY_FALLBACK_IMAGE:-local/alloy6:latest}"
 FULL=${FULL:-0}
 MULTI=${MULTI:-0}
+PUSH=${ALLOY_PUSH:-0}
 
-# Build image if missing
-if ! docker image inspect "$IMAGE" >/dev/null 2>&1; then
-  docker build -t "$IMAGE" "$HERE"
-fi
+# Resolve image: pull ghcr if possible, otherwise build local; optionally push built image to ghcr for caching
+resolve_image() {
+  local img="$IMAGE"
+  if docker image inspect "$img" >/dev/null 2>&1; then
+    IMAGE="$img"
+    return
+  fi
+
+  if docker pull "$img" >/dev/null 2>&1; then
+    IMAGE="$img"
+    return
+  fi
+
+  # Fall back to local build
+  if ! docker image inspect "$LOCAL_FALLBACK_IMAGE" >/dev/null 2>&1; then
+    docker build -t "$LOCAL_FALLBACK_IMAGE" "$HERE"
+  fi
+
+  # Optionally publish to ghcr for future pulls
+  if [ "$PUSH" = "1" ]; then
+    docker tag "$LOCAL_FALLBACK_IMAGE" "$img"
+    docker push "$img" || true
+    IMAGE="$img"
+  else
+    IMAGE="$LOCAL_FALLBACK_IMAGE"
+  fi
+}
+
+resolve_image
 
 if [ "$FULL" = "1" ]; then
   docker run --rm -v "$HERE":/work "$IMAGE" exec -c SpecNoWhereEqAlgoNoWhere -o - "$ALS"