Task 60521891714

security: harden CI actions and subprocess calls

2026-01-15 13:30:39 completed security-hardening-ci-scripts cb4f2b3b5b8d1a4c1acd46a5434c018e3af34975


Commands that took longer than 1 second (total 9m11s)
linedurationpercentagecommand
95432s5%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/debian:trixie --build-arg=FILE_ENV=./ci/test/00_setup_env_native_iwyu.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_iwyu --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_iwyu --load /home/admin/actions-runner/_work/bitcoin/bitcoin
122512s2%cmake -S /home/admin/actions-runner/_work/_temp -B /home/admin/actions-runner/_work/_temp/build -DBUILD_BENCH=ON -DBUILD_FUZZ_BINARY=ON -DWERROR=ON -DCMAKE_INSTALL_PREFIX=/home/admin/actions-runner/_work/_temp/ci/scratch/out -Werror=dev -DCMAKE_EXPORT_COMPILE_COMMANDS=ON --preset dev-mode -DBUILD_GUI=OFF -DCMAKE_C_COMPILER=clang-21 -DCMAKE_CXX_COMPILER=clang++-21
169514s2%tee /tmp/iwyu_ci.out
19237m32s82%tee /tmp/iwyu_ci.out
336311s0%python3 /include-what-you-use/fix_includes.py --nosafe_headers
3447110s1%./contrib/devtools/clang-format-diff.py -binary=clang-format-21 -p1 -i -v
583727s1%docker container kill 1c6ea1b6125638f4edd1d98687c4ce91a390745b1eb8b4069b4645e530603ba5
Tags
  • iwyu
  • security-hardening-ci-scripts
  • COMPLETED