Task 60832491682

security: harden CI actions and subprocess calls

2026-01-19 14:41:09 completed security-hardening-ci-scripts a89391d6a6cfa53067b21566857eae8f6312905e


Commands that took longer than 1 second (total 8m53s)
linedurationpercentagecommand
95426s4%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/debian:trixie --build-arg=FILE_ENV=./ci/test/00_setup_env_native_iwyu.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_iwyu --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_iwyu --load /home/admin/actions-runner/_work/bitcoin/bitcoin
122411s2%cmake -S /home/admin/actions-runner/_work/_temp -B /home/admin/actions-runner/_work/_temp/build -DBUILD_BENCH=ON -DBUILD_FUZZ_BINARY=ON -DWERROR=ON -DCMAKE_INSTALL_PREFIX=/home/admin/actions-runner/_work/_temp/ci/scratch/out -Werror=dev -DCMAKE_EXPORT_COMPILE_COMMANDS=ON --preset dev-mode -DBUILD_GUI=OFF -DCMAKE_C_COMPILER=clang-21 -DCMAKE_CXX_COMPILER=clang++-21
169418s3%tee /tmp/iwyu_ci.out
20237m21s82%tee /tmp/iwyu_ci.out
331911s0%python3 /include-what-you-use/fix_includes.py --nosafe_headers
3401410s1%./contrib/devtools/clang-format-diff.py -binary=clang-format-21 -p1 -i -v
576627s1%docker container kill b270df3952166303a4c764012bfe0f28032ed4be65817ad3c837d625ad343ce3
Tags
  • iwyu
  • security-hardening-ci-scripts
  • COMPLETED