Task 60032533832

security: harden CI actions and subprocess calls

2026-01-11 06:14:39 completed security-hardening-ci-scripts a60858a820c15a7f07d39501add6de2b1618936b


Commands that took longer than 1 second (total 19m8s)
linedurationpercentagecommand
9805s0%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/ubuntu:24.04 --build-arg=FILE_ENV=./ci/test/00_setup_env_native_msan.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_msan --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_msan --load /home/admin/actions-runner/_work/bitcoin/bitcoin
11452s0%retry -- apt-get update
11662s0%retry -- apt-get install curl -y
14662s0%g++-13 g++-13-x86-64-linux-gnu
15767s0%amd64 4:13.2.0-7ubuntu1 [1100 B]
19296s0%(4:13.2.0-7ubuntu1) ...
228235s3%retry -- git clone --depth=1 https://github.com/llvm/llvm-project -b llvmorg-21.1.5 /llvm-project
24123s0%- skipped
25441s0%testing configuration: /llvm-project/libcxx/test/configs/llvm-libc++-shared.cfg.in
258012s1%ninja -C /cxx_build/ -j16
45812s0%rm -rf /llvm-project
458640s3%echo -n done
46161s0%docker run --rm --interactive --detach --tty --cap-add=LINUX_IMMUTABLE --mount=type=bind,src=/home/admin/actions-runner/_work/bitcoin/bitcoin,dst=/home/admin/actions-runner/_work/bitcoin/bitcoin,readonly --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/ccache_dir,dst=/home/admin/actions-runner/_work/_temp/ccache_dir --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/built,dst=/home/admin/actions-runner/_work/_temp/depends/built --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/sources,dst=/home/admin/actions-runner/_work/_temp/depends/sources --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/previous_releases,dst=/home/admin/actions-runner/_work/_temp/previous_releases --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/build,dst=/home/admin/actions-runner/_work/_temp/build --env-file=/tmp/env-admin-ci_native_msan --name=ci_native_msan --network=ci-ip6net --platform=linux ci_native_msan
48011s0%retry -- curl --location --fail https://github.com/bitcoin-core/qa-assets/raw/main/unit_test_data/script_assets_test.json -o /home/admin/actions-runner/_work/_temp/ci/scratch/qa-assets/unit_test_data//script_assets_test.json
50734s0%-
517711s0%- skipped
55021m19s6%cmake --build /home/admin/actions-runner/_work/_temp/build -j16 --target all install
65086m52s35%ctest --test-dir /home/admin/actions-runner/_work/_temp/build --stop-on-failure -j16 --timeout 2400
68217m58s41%/home/admin/actions-runner/_work/_temp/build/test/functional/test_runner.py --ci -j16 --tmpdirprefix /home/admin/actions-runner/_work/_temp/ci/scratch/test_runner/ --ansi --combinedlogslen=99999999 --timeout-factor=40 --quiet --failfast
82075s0%docker container kill 8d83f66a33ea3d47ced7f9b5866459e96a308be79f9670bf8cc832d185534141
Tags
  • MSan
  • security-hardening-ci-scripts
  • COMPLETED