Task 60027534557

security: harden CI actions and subprocess calls

2026-01-11 09:44:06 completed security-hardening-ci-scripts dc28f660c588097cb3752944031b53e6476f8529


Commands that took longer than 1 second (total 56m25s)
linedurationpercentagecommand
9806s0%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/ubuntu:24.04 --build-arg=FILE_ENV=./ci/test/00_setup_env_native_fuzz_with_msan.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_fuzz_msan --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_fuzz_msan --load /home/admin/actions-runner/_work/bitcoin/bitcoin
11461s0%retry -- apt-get update
11673s0%retry -- apt-get install curl -y
14664s0%g++-13 g++-13-x86-64-linux-gnu
15685s0%amd64 4:13.2.0-7ubuntu1 [1100 B]
19255s0%(4:13.2.0-7ubuntu1) ...
225641s1%retry -- git clone --depth=1 https://github.com/llvm/llvm-project -b llvmorg-21.1.5 /llvm-project
23873s0%- skipped
25191s0%testing configuration: /llvm-project/libcxx/test/configs/llvm-libc++-shared.cfg.in
255523s0%ninja -C /cxx_build/ -j8
45563s0%rm -rf /llvm-project
456140s1%echo -n done
45911s0%docker run --rm --interactive --detach --tty --cap-add=LINUX_IMMUTABLE --mount=type=bind,src=/home/admin/actions-runner/_work/bitcoin/bitcoin,dst=/home/admin/actions-runner/_work/bitcoin/bitcoin,readonly --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/ccache_dir,dst=/home/admin/actions-runner/_work/_temp/ccache_dir --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/built,dst=/home/admin/actions-runner/_work/_temp/depends/built --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/sources,dst=/home/admin/actions-runner/_work/_temp/depends/sources --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/previous_releases,dst=/home/admin/actions-runner/_work/_temp/previous_releases --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/build,dst=/home/admin/actions-runner/_work/_temp/build --env-file=/tmp/env-admin-ci_native_fuzz_msan --name=ci_native_fuzz_msan --network=ci-ip6net --platform=linux ci_native_fuzz_msan
477152s1%1].Add(stats);
51594s0%-
524411s0%- skipped
556024s0%cmake --build /home/admin/actions-runner/_work/_temp/build -j8 --target all
609651m44s91%/home/admin/actions-runner/_work/_temp/build/test/fuzz/test_runner.py -j8 -l DEBUG /home/admin/actions-runner/_work/_temp/ci/scratch/qa-assets/fuzz_corpora/ --empty_min_time=60
654910s0%docker container kill 1302bfbb156632cc064d5f14e473fdd263aa2b757ec34a0252656c4c65ffe492
Tags
  • MSan, fuzz
  • security-hardening-ci-scripts
  • COMPLETED