Task 60832491710

security: harden CI actions and subprocess calls

2026-01-19 14:41:09 completed security-hardening-ci-scripts a89391d6a6cfa53067b21566857eae8f6312905e


Commands that took longer than 1 second (total 54m2s)
linedurationpercentagecommand
98723s0%docker buildx build --file=/home/admin/actions-runner/_work/bitcoin/bitcoin/ci/test_imagefile --build-arg=CI_IMAGE_NAME_TAG=mirror.gcr.io/ubuntu:24.04 --build-arg=FILE_ENV=./ci/test/00_setup_env_native_fuzz_with_msan.sh --build-arg=BASE_ROOT_DIR=/home/admin/actions-runner/_work/_temp --platform=linux --label=bitcoin-ci-test --tag=ci_native_fuzz_msan --cache-from type=gha,url=http://127.0.0.1:12321/,url_v2=http://127.0.0.1:12321/,scope=ci_native_fuzz_msan --load /home/admin/actions-runner/_work/bitcoin/bitcoin
10751s0%docker run --rm --interactive --detach --tty --cap-add=LINUX_IMMUTABLE --mount=type=bind,src=/home/admin/actions-runner/_work/bitcoin/bitcoin,dst=/home/admin/actions-runner/_work/bitcoin/bitcoin,readonly --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/ccache_dir,dst=/home/admin/actions-runner/_work/_temp/ccache_dir --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/built,dst=/home/admin/actions-runner/_work/_temp/depends/built --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/depends/sources,dst=/home/admin/actions-runner/_work/_temp/depends/sources --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/previous_releases,dst=/home/admin/actions-runner/_work/_temp/previous_releases --mount=type=bind,src=/home/admin/actions-runner/_work/_temp/build,dst=/home/admin/actions-runner/_work/_temp/build --env-file=/tmp/env-admin-cinativefuzzmsan --name=ci_native_fuzz_msan --network=ci-ip6net --platform=linux ci_native_fuzz_msan
125652s1%retry -- git clone --depth=1 https://github.com/bitcoin-core/qa-assets /home/admin/actions-runner/_work/_temp/ci/scratch/qa-assets
16444s0%-
172912s0%- skipped
204510s0%cmake --build /home/admin/actions-runner/_work/_temp/build -j8 --target all
258151m38s95%/home/admin/actions-runner/_work/_temp/build/test/fuzz/test_runner.py -j8 -l DEBUG /home/admin/actions-runner/_work/_temp/ci/scratch/qa-assets/fuzz_corpora/ --empty_min_time=60
30348s0%docker container kill e55853799dd2d4363f442141fad6c16c5f127aa014b7dc336740e6ec5da178ef
Tags
  • MSan, fuzz
  • security-hardening-ci-scripts
  • COMPLETED