Task 60027535276

security: harden CI actions and subprocess calls

2026-01-11 09:44:06 completed security-hardening-ci-scripts dc28f660c588097cb3752944031b53e6476f8529


Commands that took longer than 1 second (total 11m19s)
linedurationpercentagecommand
9346s0%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/ubuntu:24.04 --build-arg=FILE_ENV=./ci/test/00_setup_env_win64_msvcrt.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_win64_msvcrt --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_win64_msvcrt --load /home/admin/actions-runner/_work/bitcoin/bitcoin
10891s0%retry -- apt-get update
11611s0%g++-13
12639s1%amd64 4:13.2.0-7ubuntu1 [1100 B]
16224s0%(4:13.2.0-7ubuntu1) ...
193424s3%echo -n done
21431s0%bash -c 'CONFIG_SHELL= make -j4 -C depends HOST=x86_64-w64-mingw32 LOG=1'
21648s1%cmake -S /home/admin/actions-runner/_work/_temp -B /home/admin/actions-runner/_work/_temp/build -DBUILD_BENCH=ON -DBUILD_FUZZ_BINARY=ON -DCMAKE_TOOLCHAIN_FILE=/home/admin/actions-runner/_work/_temp/depends/x86_64-w64-mingw32/toolchain.cmake -DWERROR=ON -DCMAKE_INSTALL_PREFIX=/home/admin/actions-runner/_work/_temp/ci/scratch/out -Werror=dev --preset=dev-mode -DENABLE_IPC=OFF -DWITH_USDT=OFF -DREDUCE_EXPORTS=ON -DCMAKE_CXX_FLAGS=-Wno-error=maybe-uninitialized
25338m47s77%cmake --build /home/admin/actions-runner/_work/_temp/build -j4 --target all deploy
37391m4s9%docker container kill 0b08b14f3b7ff3a2999cabd58f3d9e5c33b5d509af4dd52729ec45f703c5ab43
Tags
  • Windows-cross to x86_64, msvcrt
  • security-hardening-ci-scripts
  • COMPLETED