Task 60007136984

security: harden CI actions and subprocess calls

2026-01-10 13:23:35 completed security-hardening-ci-scripts 6cc01c12b2e93b5c28ec5461ba8af25a2371b59e


Commands that took longer than 1 second (total 9m28s)
linedurationpercentagecommand
9326s1%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/ubuntu:24.04 --build-arg=FILE_ENV=./ci/test/00_setup_env_native_nowallet.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_nowallet --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_nowallet --load /home/admin/actions-runner/_work/bitcoin/bitcoin
10872s0%retry -- apt-get update
11631s0%g++-13
12724s0%amd64 4:13.2.0-7ubuntu1 [1100 B]
16615s0%(4:13.2.0-7ubuntu1) ...
205724s4%echo -n done
22671s0%retry -- curl --location --fail https://github.com/bitcoin-core/qa-assets/raw/main/unit_test_data/script_assets_test.json -o /home/admin/actions-runner/_work/_temp/ci/scratch/qa-assets/unit_test_data//script_assets_test.json
22824s0%bash -c 'CONFIG_SHELL= make -j4 -C depends HOST=x86_64-pc-linux-gnu NO_WALLET=1 CC=clang-17 CXX='\''clang++-17 -stdlib=libc++'\'' LOG=1'
231110s1%cmake -S /home/admin/actions-runner/_work/_temp -B /home/admin/actions-runner/_work/_temp/build -DBUILD_BENCH=ON -DBUILD_FUZZ_BINARY=ON -DCMAKE_TOOLCHAIN_FILE=/home/admin/actions-runner/_work/_temp/depends/x86_64-pc-linux-gnu/toolchain.cmake -DWERROR=ON -DCMAKE_INSTALL_PREFIX=/home/admin/actions-runner/_work/_temp/ci/scratch/out -Werror=dev --preset=dev-mode -DREDUCE_EXPORTS=ON -DENABLE_WALLET=OFF
275845s7%cmake --build /home/admin/actions-runner/_work/_temp/build -j4 --target all install
387522s3%ctest --test-dir /home/admin/actions-runner/_work/_temp/build --stop-on-failure -j4 --timeout 2400
41586m40s70%/home/admin/actions-runner/_work/_temp/build/test/functional/test_runner.py --ci -j4 --tmpdirprefix /home/admin/actions-runner/_work/_temp/ci/scratch/test_runner/ --ansi --combinedlogslen=99999999 --timeout-factor=40 --quiet --failfast
54876s1%docker container kill 06e49b0761340a68577ca2ab524d602de4ddf30a9b030ed5031198e2590541bd
Tags
  • No wallet
  • security-hardening-ci-scripts
  • COMPLETED