Just wanted to document a scenario to look out for and maybe mark something for Pants improvement.
Someone was complaining their PR took 17 minutes to pass CI without touching code. We use a remote cache, and every CI runner uses the same AMI, so this is a huge red flag.
After debugging I found out that I could reproduce if I wiped the PEX named cache. Turns out an sdist had an irreproducible build. Every time you build it, you get a different fingerprint.
This is a gotcha for sure. But also highlights how we likely should rely on PEXs cache less, and rely on our own more (that's hand-waivey as hell, but also true)