Jason Ish
cc3f3a0a72
github-ci: fix rust check by fixing git directory permissions
...
Due to the update to AlmaLinux 9.2, a new version of git with stricter
permissions was introduced. Mark the directory as safe as we have
done in other builds with newer versions of it.
2 years ago
Alex
60902236e4
build: harden rust.yml permissions
...
Signed-off-by: Alex <aleksandrosansan@gmail.com>
2 years ago
Victor Julien
74326a43e7
github-ci: add windivert build
3 years ago
Victor Julien
fb7ff5b61c
github-ci: spelling
3 years ago
Victor Julien
cb66a1e636
github-ci: add padding check to scan-build
3 years ago
Victor Julien
d0d6ca4c6e
github-ci: add more scan-build checks
...
Explicitly disable:
security.insecureAPI.DeprecatedOrUnsafeBufferHandling
optin.performance.Padding
3 years ago
Victor Julien
fb237e8de3
github-ci: add dpdk, nfqueue, nflog to scan-build
3 years ago
Victor Julien
e717c2e0ec
github-ci: remove debian 9 as it is EOL
3 years ago
Jason Ish
915f487a1c
github-ci: update Fedora 36 cov build to Fedora 38
...
As Fedora 36 will be EOL in a month.
3 years ago
Jason Ish
bcbceb13f8
github-ci: update non-root build to Fedora 37
...
As Fedora 36 will be EOL in a month.
3 years ago
Jason Ish
b0bc95d7c1
github-ci: add Fedora 38 builds
3 years ago
Jason Ish
3974142b41
github-ci: use cbindgen from packages on almalinux:9
...
AlmaLinux 9 has cbindgen available from the package repositories.
3 years ago
Jason Ish
fa651606a0
github-ci: add Fedora 37 builders
3 years ago
Jason Ish
4105ac436e
github-ci: add Fedora 36 gcc builder
...
The existing Fedora 36 builder used clang. Add a gcc builder as it can
show different errors.
3 years ago
Jason Ish
04fb0189a7
github-ci: replace Fedora no-jansson build with AlmaLinux
...
Use AlmaLinux 9 for the no-jansson test instead of Fedora as it will
need to be updated much less.
3 years ago
Jason Ish
dd72a64c53
github-ci: remove Fedora 35 build: EOL
3 years ago
Jason Ish
e32d01d01b
github-ci: enable asan for Ubuntu debug-validation test
3 years ago
Jason Ish
497a6e7ab7
github-ci: fedora non-root: remove external script usage
...
In the end, its not needed and makes it easier to copy and paste to a
new test.
3 years ago
Jason Ish
ec253e54cc
github-ci: use bundle.sh script for libhtp, suricata-update
...
Update the GitHub CI workflow to use the bundle.sh script to pull in
Suricata-Update and libhtp. This means one less place where defaults
are hardcoded and can get out of sync.
This also simplifies the variable names that can be embedded in a pull
request message to use the same variable names that bundle.sh
expects. Of note, this removes the _PR variant, instead a branch name
of "pr/N" can be used to specify a PR.
3 years ago
Victor Julien
efeaa6e2c7
github: add scan-build workflow
...
Add scan-build workflow that fails on any warning.
Exclude libhtp as there is still one open issue there.
3 years ago
Lukas Sismis
4f3e1279f5
github-ci: Add Netmap build to GH actions
...
Issue: #5803
3 years ago
Jason Ish
b734676617
github-ci: add Debian 11 builder with XDP
3 years ago
Philippe Antoine
96b48d7104
github: avoid bash escaping
...
so as to allow ' in github discussion and get CI green
3 years ago
Jason Ish
2dc157ed9e
github-ci: dump github context and pr body
...
For debugging the parsing of suricata-verify-pr.
3 years ago
Jason Ish
102a022898
github-ci: annotate job with s-v info
3 years ago
Jason Ish
3d8130614e
github-ci/rust: display clippy diff
3 years ago
Jason Ish
49e9f51a03
github-ci: fedora non-root: suricata-verify -q
...
Run Suricata-Verify in quiet mode for the non-root build to more
easily find the error when fails.
3 years ago
Lukas Sismis
1c8205e6b1
dpdk: add Github action to build Suricata with all available (LTS) DPDK versions
3 years ago
dependabot[bot]
8bebc2390d
github-actions: bump ossf/scorecard-action from 2.1.1 to 2.1.2
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.1.1 to 2.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](15c10fcf1c...e38b1902ae )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
dependabot[bot]
ad7baad4a0
github-actions: bump actions/download-artifact from 3.0.1 to 3.0.2
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](9782bd6a98...9bc31d5ccc )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
dependabot[bot]
87420c8083
github-actions: bump actions/upload-artifact from 3.1.1 to 3.1.2
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](83fd05a356...0b7f8abb15 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
dependabot[bot]
c091e65662
github-actions: bump actions/checkout from 3.2.0 to 3.3.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
dependabot[bot]
fc177754d1
github-actions: bump ossf/scorecard-action from 2.0.6 to 2.1.1
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.0.6 to 2.1.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](99c53751e0...15c10fcf1c )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
dependabot[bot]
b4538134fa
github-actions: bump actions/checkout from 3.1.0 to 3.2.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
Jason Ish
a2a920afb0
github-ci: verify generated rust code is rustfmt and clippy clean
3 years ago
Jason Ish
712d80107f
setup-app-layer: remove generator for C parsers
...
Ticket: 4939
3 years ago
Jason Ish
986212c19d
github-ci: add app-layer-template builder
...
Creates a protocol parser and logger and builds.
3 years ago
Jason Ish
23424821be
github-ci: rename alma to almalinux; 8.4 to 8
3 years ago
Jason Ish
aa36e9e37f
github-ci: enable lua on Fedora 36 build
...
Not many of the jobs that run S-V enable Lua, enable Lua for Fedora 36
which also runs S-V.
3 years ago
Jason Ish
01badea65c
github-ci: fail if cargo clippy --fix creates a changes
...
Previously this was doing fixups and only warning, not erroring. Which
could made the following clippy command pass.
3 years ago
Richard McConnell
9b43481680
af-xdp: Configure build with AF_XDP support
3 years ago
Jason Ish
64fab3be04
github-ci: non-root builder
...
All the GitHub CI jobs run as root inside a container. This means the
testing is done in a different environment than a developer typically
uses, running as a user.
Add a job that does the build as a non-root user.
3 years ago
Jason Ish
bf1c185c03
github-ci/centos:7: cache yum RPMs
3 years ago
Jason Ish
1c13efb8d4
github-ci/windows: cache cargo artifacts
3 years ago
Jason Ish
6da066cc53
github-ci/macos: don't force cbindgen
...
We want to use binary from the cache if available.
3 years ago
Jason Ish
0dddfbc8e6
github-ci: cache RPMs on dnf distros
3 years ago
Jason Ish
814a76a217
github-ci: better .cargo caching
3 years ago
Philippe Antoine
222f2ac1c5
ci: remove unnecessary write permission to github workflow
3 years ago
Philippe Antoine
7fd3aaa81c
ci: build with -Werror for -Wimplicit-int-conversion
...
So that CI gets red
3 years ago
Philippe Antoine
7cfc45a6f8
ci: adds one build with hyperscan
3 years ago