Task 60321919568

security: harden CI actions and subprocess calls

2026-01-14 04:16:44 completed security-hardening-ci-scripts a001b4c57f1647b6f8d202a65aaf95e65aca5cb4


Commands that took longer than 1 second (total 9m40s)
linedurationpercentagecommand
95130s5%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/debian:trixie --build-arg=FILE_ENV=./ci/test/00_setup_env_native_iwyu.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_iwyu --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_iwyu --load /home/admin/actions-runner/_work/bitcoin/bitcoin
10401s0%docker run --rm --interactive --detach --tty --cap-add=LINUX_IMMUTABLE --mount=type=bind,src=/home/admin/actions-runner/_work/bitcoin/bitcoin,dst=/home/admin/actions-runner/_work/bitcoin/bitcoin,readonly --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/ccache_dir,dst=/home/admin/actions-runner/_work/_temp/ccache_dir --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/built,dst=/home/admin/actions-runner/_work/_temp/depends/built --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/sources,dst=/home/admin/actions-runner/_work/_temp/depends/sources --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/previous_releases,dst=/home/admin/actions-runner/_work/_temp/previous_releases --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/build,dst=/home/admin/actions-runner/_work/_temp/build --env-file=/tmp/env-admin-ci_native_iwyu --name=ci_native_iwyu --network=ci-ip6net --platform=linux ci_native_iwyu
122113s2%cmake -S /home/admin/actions-runner/_work/_temp -B /home/admin/actions-runner/_work/_temp/build -DBUILD_BENCH=ON -DBUILD_FUZZ_BINARY=ON -DWERROR=ON -DCMAKE_INSTALL_PREFIX=/home/admin/actions-runner/_work/_temp/ci/scratch/out -Werror=dev -DCMAKE_EXPORT_COMPILE_COMMANDS=ON --preset dev-mode -DBUILD_GUI=OFF -DCMAKE_C_COMPILER=clang-21 -DCMAKE_CXX_COMPILER=clang++-21
169114s2%tee /tmp/iwyu_ci.out
19198m2s83%tee /tmp/iwyu_ci.out
336701s0%python3 /include-what-you-use/fix_includes.py --nosafe_headers
3451010s1%./contrib/devtools/clang-format-diff.py -binary=clang-format-21 -p1 -i -v
584548s1%docker container kill 75358d8e4a9d6b47df047a74eaa6ebff66277c97e3ebcba328f482dc420f35f4
Tags
  • iwyu
  • security-hardening-ci-scripts
  • COMPLETED