Task 60027534568

security: harden CI actions and subprocess calls

2026-01-11 09:44:06 completed security-hardening-ci-scripts dc28f660c588097cb3752944031b53e6476f8529


Commands that took longer than 1 second (total 18m38s)
linedurationpercentagecommand
9807s0%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/ubuntu:24.04 --build-arg=FILE_ENV=./ci/test/00_setup_env_native_msan.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_msan --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_msan --load /home/admin/actions-runner/_work/bitcoin/bitcoin
11472s0%retry -- apt-get update
11682s0%retry -- apt-get install curl -y
14673s0%g++-13 g++-13-x86-64-linux-gnu
15794s0%amd64 4:13.2.0-7ubuntu1 [1100 B]
19306s0%(4:13.2.0-7ubuntu1) ...
228341s3%retry -- git clone --depth=1 https://github.com/llvm/llvm-project -b llvmorg-21.1.5 /llvm-project
24123s0%- skipped
25441s0%testing configuration: /llvm-project/libcxx/test/configs/llvm-libc++-shared.cfg.in
258011s0%ninja -C /cxx_build/ -j16
45812s0%rm -rf /llvm-project
458640s3%echo -n done
46161s0%docker run --rm --interactive --detach --tty --cap-add=LINUX_IMMUTABLE --mount=type=bind,src=/home/admin/actions-runner/_work/bitcoin/bitcoin,dst=/home/admin/actions-runner/_work/bitcoin/bitcoin,readonly --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/ccache_dir,dst=/home/admin/actions-runner/_work/_temp/ccache_dir --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/built,dst=/home/admin/actions-runner/_work/_temp/depends/built --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/sources,dst=/home/admin/actions-runner/_work/_temp/depends/sources --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/previous_releases,dst=/home/admin/actions-runner/_work/_temp/previous_releases --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/build,dst=/home/admin/actions-runner/_work/_temp/build --env-file=/tmp/env-admin-ci_native_msan --name=ci_native_msan --network=ci-ip6net --platform=linux ci_native_msan
50734s0%-
517711s0%- skipped
55021m15s6%cmake --build /home/admin/actions-runner/_work/_temp/build -j16 --target all install
65086m50s36%ctest --test-dir /home/admin/actions-runner/_work/_temp/build --stop-on-failure -j16 --timeout 2400
68217m25s39%/home/admin/actions-runner/_work/_temp/build/test/functional/test_runner.py --ci -j16 --tmpdirprefix /home/admin/actions-runner/_work/_temp/ci/scratch/test_runner/ --ansi --combinedlogslen=99999999 --timeout-factor=40 --quiet --failfast
82077s0%docker container kill 5cf2a5e4c5c9a62cc1e1fb36779e7844ff055a2352468b992654ca61500bbf63
Tags
  • MSan
  • security-hardening-ci-scripts
  • COMPLETED