Task 60027534549

security: harden CI actions and subprocess calls

2026-01-11 09:44:06 completed security-hardening-ci-scripts dc28f660c588097cb3752944031b53e6476f8529


Commands that took longer than 1 second (total 10m51s)
linedurationpercentagecommand
95110s1%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/debian:trixie --build-arg=FILE_ENV=./ci/test/00_setup_env_native_iwyu.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_iwyu --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_iwyu --load /home/admin/actions-runner/_work/bitcoin/bitcoin
11273s0%retry -- apt-get install curl -y
14081s0%retry -- apt-get update
15222s0%g++-14
174916s2%amd64 4:14.2.0-1 [1344 B]
253314s2%(4:14.2.0-1) ...
32831s0%- skipped
333021s3%make -C /iwyu-build/ install -j8
33881m1s9%echo -n done
359913s1%cmake -S /home/admin/actions-runner/_work/_temp -B /home/admin/actions-runner/_work/_temp/build -DBUILD_BENCH=ON -DBUILD_FUZZ_BINARY=ON -DWERROR=ON -DCMAKE_INSTALL_PREFIX=/home/admin/actions-runner/_work/_temp/ci/scratch/out -Werror=dev -DCMAKE_EXPORT_COMPILE_COMMANDS=ON --preset dev-mode -DBUILD_GUI=OFF -DCMAKE_C_COMPILER=clang-21 -DCMAKE_CXX_COMPILER=clang++-21
406914s2%tee /tmp/iwyu_ci.out
42977m28s68%tee /tmp/iwyu_ci.out
359341s0%python3 /include-what-you-use/fix_includes.py --nosafe_headers
3677110s1%./contrib/devtools/clang-format-diff.py -binary=clang-format-21 -p1 -i -v
606258s1%docker container kill e84aca411f51d5e0cbea169bb61904501ee70f86adae31fc5aed2bccc71c71a4
Tags
  • iwyu
  • security-hardening-ci-scripts
  • COMPLETED