Function generateIntegrityAwareCacheKey

pkg/workflow/cache_integrity.go:217–232

generateIntegrityAwareCacheKey generates the new-format cache key that includes the integrity level and policy hash as prefixes. Format: memory-{integrityLevel}-{policyHash}-[{cacheID}-]{workflowID}-{runID} The cacheID segment is omitted for the "default" cache ID to maintain a clean key. Examples

(cacheID, integrityLevel, policyHash string)

//	memory-unapproved-7e4d9f12-${{ env.GH_AW_WORKFLOW_ID_SANITIZED }}-${{ github.run_id }}
//	memory-none-nopolicy-session-${{ env.GH_AW_WORKFLOW_ID_SANITIZED }}-${{ github.run_id }}
func generateIntegrityAwareCacheKey(cacheID, integrityLevel, policyHash string) string {
	var key string
	if cacheID == "default" || cacheID == "" {
		key = fmt.Sprintf(
			"memory-%s-%s-${{ env.GH_AW_WORKFLOW_ID_SANITIZED }}-${{ github.run_id }}",
			integrityLevel, policyHash,
		)
	} else {
		key = fmt.Sprintf(
			"memory-%s-%s-%s-${{ env.GH_AW_WORKFLOW_ID_SANITIZED }}-${{ github.run_id }}",
			integrityLevel, policyHash, cacheID,
		)
	}
	cacheIntegrityLog.Printf("Generated integrity-aware cache key: cacheID=%s, integrityLevel=%s, policyHash=%s", cacheID, integrityLevel, policyHash)
	return key
}