diff options
Diffstat (limited to '.github/workflows/build-extra.yml')
-rw-r--r-- | .github/workflows/build-extra.yml | 32 |
1 files changed, 25 insertions, 7 deletions
diff --git a/.github/workflows/build-extra.yml b/.github/workflows/build-extra.yml index 6f9a4bc2c..9296062c1 100644 --- a/.github/workflows/build-extra.yml +++ b/.github/workflows/build-extra.yml | |||
@@ -4,7 +4,10 @@ on: | |||
4 | push: | 4 | push: |
5 | branches: [ master ] | 5 | branches: [ master ] |
6 | paths-ignore: | 6 | paths-ignore: |
7 | - .git-blame-ignore-revs | ||
8 | - .gitignore | ||
7 | - CONTRIBUTING.md | 9 | - CONTRIBUTING.md |
10 | - COPYING | ||
8 | - README | 11 | - README |
9 | - README.md | 12 | - README.md |
10 | - RELNOTES | 13 | - RELNOTES |
@@ -16,7 +19,10 @@ on: | |||
16 | pull_request: | 19 | pull_request: |
17 | branches: [ master ] | 20 | branches: [ master ] |
18 | paths-ignore: | 21 | paths-ignore: |
22 | - .git-blame-ignore-revs | ||
23 | - .gitignore | ||
19 | - CONTRIBUTING.md | 24 | - CONTRIBUTING.md |
25 | - COPYING | ||
20 | - README | 26 | - README |
21 | - README.md | 27 | - README.md |
22 | - RELNOTES | 28 | - RELNOTES |
@@ -28,11 +34,13 @@ on: | |||
28 | 34 | ||
29 | jobs: | 35 | jobs: |
30 | build-clang: | 36 | build-clang: |
31 | runs-on: ubuntu-20.04 | 37 | runs-on: ubuntu-22.04 |
32 | steps: | 38 | steps: |
33 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | 39 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b |
40 | - name: install dependencies | ||
41 | run: sudo apt-get install libapparmor-dev libselinux1-dev | ||
34 | - name: configure | 42 | - name: configure |
35 | run: CC=clang-11 ./configure --enable-fatal-warnings | 43 | run: CC=clang-14 ./configure --enable-fatal-warnings --enable-apparmor --enable-selinux |
36 | - name: make | 44 | - name: make |
37 | run: make | 45 | run: make |
38 | - name: make install | 46 | - name: make install |
@@ -40,16 +48,26 @@ jobs: | |||
40 | - name: print version | 48 | - name: print version |
41 | run: command -V firejail && firejail --version | 49 | run: command -V firejail && firejail --version |
42 | scan-build: | 50 | scan-build: |
43 | runs-on: ubuntu-20.04 | 51 | runs-on: ubuntu-22.04 |
44 | steps: | 52 | steps: |
45 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | 53 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b |
46 | - name: install clang-tools-11 | 54 | - name: install clang-tools-14 and dependencies |
47 | run: sudo apt-get install clang-tools-11 | 55 | run: sudo apt-get install clang-tools-14 libapparmor-dev libselinux1-dev |
48 | - name: configure | 56 | - name: configure |
49 | run: CC=clang-11 ./configure --enable-fatal-warnings | 57 | run: CC=clang-14 ./configure --enable-fatal-warnings --enable-apparmor --enable-selinux |
50 | - name: scan-build | 58 | - name: scan-build |
51 | run: NO_EXTRA_CFLAGS="yes" scan-build-11 --status-bugs make | 59 | run: NO_EXTRA_CFLAGS="yes" scan-build-14 --status-bugs make |
52 | cppcheck: | 60 | cppcheck: |
61 | runs-on: ubuntu-22.04 | ||
62 | steps: | ||
63 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | ||
64 | - name: install cppcheck | ||
65 | run: sudo apt-get install cppcheck | ||
66 | - name: cppcheck | ||
67 | run: cppcheck -q --force --error-exitcode=1 --enable=warning,performance -i src/firejail/checkcfg.c -i src/firejail/main.c . | ||
68 | # new cppcheck version currently chokes on checkcfg.c and main.c, therefore scan all files also | ||
69 | # with older cppcheck version from ubuntu 20.04. | ||
70 | cppcheck_old: | ||
53 | runs-on: ubuntu-20.04 | 71 | runs-on: ubuntu-20.04 |
54 | steps: | 72 | steps: |
55 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b | 73 | - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b |