Task 60007137026

security: harden CI actions and subprocess calls

2026-01-10 13:23:35 completed security-hardening-ci-scripts 6cc01c12b2e93b5c28ec5461ba8af25a2371b59e


Commands that took longer than 1 second (total 55m54s)
linedurationpercentagecommand
9806s0%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/ubuntu:24.04 --build-arg=FILE_ENV=./ci/test/00_setup_env_native_fuzz_with_msan.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_fuzz_msan --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_fuzz_msan --load /home/admin/actions-runner/_work/bitcoin/bitcoin
11462s0%retry -- apt-get update
11673s0%retry -- apt-get install curl -y
14662s0%g++-13 g++-13-x86-64-linux-gnu
15774s0%amd64 4:13.2.0-7ubuntu1 [1100 B]
19256s0%(4:13.2.0-7ubuntu1) ...
225642s1%retry -- git clone --depth=1 https://github.com/llvm/llvm-project -b llvmorg-21.1.5 /llvm-project
23884s0%- skipped
25202s0%testing configuration: /llvm-project/libcxx/test/configs/llvm-libc++-shared.cfg.in
255624s0%ninja -C /cxx_build/ -j8
45573s0%rm -rf /llvm-project
456243s1%echo -n done
45921s0%docker run --rm --interactive --detach --tty --cap-add=LINUX_IMMUTABLE --mount=type=bind,src=/home/admin/actions-runner/_work/bitcoin/bitcoin,dst=/home/admin/actions-runner/_work/bitcoin/bitcoin,readonly --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/ccache_dir,dst=/home/admin/actions-runner/_work/_temp/ccache_dir --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/built,dst=/home/admin/actions-runner/_work/_temp/depends/built --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/sources,dst=/home/admin/actions-runner/_work/_temp/depends/sources --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/previous_releases,dst=/home/admin/actions-runner/_work/_temp/previous_releases --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/build,dst=/home/admin/actions-runner/_work/_temp/build --env-file=/tmp/env-admin-ci_native_fuzz_msan --name=ci_native_fuzz_msan --network=ci-ip6net --platform=linux ci_native_fuzz_msan
477257s1%1].Add(stats);
51604s0%-
524513s0%- skipped
556126s0%cmake --build /home/admin/actions-runner/_work/_temp/build -j8 --target all
609750m57s91%/home/admin/actions-runner/_work/_temp/build/test/fuzz/test_runner.py -j8 -l DEBUG /home/admin/actions-runner/_work/_temp/ci/scratch/qa-assets/fuzz_corpora/ --empty_min_time=60
655010s0%docker container kill 824945a1cb6c1d5621c909d3881fbdd91bd1fec383ce802aff00f17937ffd160
Tags
  • MSan, fuzz
  • security-hardening-ci-scripts
  • COMPLETED