diff options
Diffstat (limited to '.github/workflows/build-extra.yml')
-rw-r--r-- | .github/workflows/build-extra.yml | 26 |
1 files changed, 19 insertions, 7 deletions
diff --git a/.github/workflows/build-extra.yml b/.github/workflows/build-extra.yml index da54c1094..9296062c1 100644 --- a/.github/workflows/build-extra.yml +++ b/.github/workflows/build-extra.yml | |||
@@ -34,11 +34,13 @@ on: | |||
34 | 34 | ||
35 | jobs: | 35 | jobs: |
36 | build-clang: | 36 | build-clang: |
37 | runs-on: ubuntu-20.04 | 37 | runs-on: ubuntu-22.04 |
38 | steps: | 38 | steps: |
39 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | 39 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b |
40 | - name: install dependencies | ||
41 | run: sudo apt-get install libapparmor-dev libselinux1-dev | ||
40 | - name: configure | 42 | - name: configure |
41 | run: CC=clang-11 ./configure --enable-fatal-warnings | 43 | run: CC=clang-14 ./configure --enable-fatal-warnings --enable-apparmor --enable-selinux |
42 | - name: make | 44 | - name: make |
43 | run: make | 45 | run: make |
44 | - name: make install | 46 | - name: make install |
@@ -46,16 +48,26 @@ jobs: | |||
46 | - name: print version | 48 | - name: print version |
47 | run: command -V firejail && firejail --version | 49 | run: command -V firejail && firejail --version |
48 | scan-build: | 50 | scan-build: |
49 | runs-on: ubuntu-20.04 | 51 | runs-on: ubuntu-22.04 |
50 | steps: | 52 | steps: |
51 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | 53 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b |
52 | - name: install clang-tools-11 | 54 | - name: install clang-tools-14 and dependencies |
53 | run: sudo apt-get install clang-tools-11 | 55 | run: sudo apt-get install clang-tools-14 libapparmor-dev libselinux1-dev |
54 | - name: configure | 56 | - name: configure |
55 | run: CC=clang-11 ./configure --enable-fatal-warnings | 57 | run: CC=clang-14 ./configure --enable-fatal-warnings --enable-apparmor --enable-selinux |
56 | - name: scan-build | 58 | - name: scan-build |
57 | run: NO_EXTRA_CFLAGS="yes" scan-build-11 --status-bugs make | 59 | run: NO_EXTRA_CFLAGS="yes" scan-build-14 --status-bugs make |
58 | cppcheck: | 60 | cppcheck: |
61 | runs-on: ubuntu-22.04 | ||
62 | steps: | ||
63 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | ||
64 | - name: install cppcheck | ||
65 | run: sudo apt-get install cppcheck | ||
66 | - name: cppcheck | ||
67 | run: cppcheck -q --force --error-exitcode=1 --enable=warning,performance -i src/firejail/checkcfg.c -i src/firejail/main.c . | ||
68 | # new cppcheck version currently chokes on checkcfg.c and main.c, therefore scan all files also | ||
69 | # with older cppcheck version from ubuntu 20.04. | ||
70 | cppcheck_old: | ||
59 | runs-on: ubuntu-20.04 | 71 | runs-on: ubuntu-20.04 |
60 | steps: | 72 | steps: |
61 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | 73 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b |