CI: Move to codecov-action@v3.1.5
[kconfig-hardened-check.git] / .github / workflows / functional_test.yml
index 31e44d0a73375a6e6778d8f343a08b2c350f6579..c94851e25bdedcbf3c4c8c81f2abff0789a891ef 100644 (file)
@@ -21,7 +21,7 @@ jobs:
     steps:
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 
@@ -29,13 +29,14 @@ jobs:
       run: |
         python -m pip install --upgrade pip
         echo "Install the package via pip..."
-        pip --verbose install git+https://github.com/a13xp0p0v/kconfig-hardened-check
+        pip --verbose install git+https://github.com/a13xp0p0v/kernel-hardening-checker
         echo "Run the installed tool..."
-        kconfig-hardened-check
+        kernel-hardening-checker
 
     - name: Check all configs with the installed tool
       run: |
         echo "Check all configs with the installed tool..."
+        sysctl -a > /tmp/sysctls
         CONFIG_DIR=`find /opt/hostedtoolcache/Python/ -name config_files`
         KCONFIGS=`find $CONFIG_DIR -type f | grep -e "\.config" -e "\.gz"`
         COUNT=0
@@ -43,12 +44,12 @@ jobs:
         do
                 COUNT=$(expr $COUNT + 1)
                 echo -e "\n>>>>> checking kconfig number $COUNT <<<<<"
-                kconfig-hardened-check -c $C -l /proc/cmdline
+                kernel-hardening-checker -c $C -l /proc/cmdline -s /tmp/sysctls
         done
         echo -e "\nHave checked $COUNT kconfigs"
 
     - name: Get source code for collecting coverage
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Run the functional tests and collect the coverage
       run: |
@@ -60,7 +61,7 @@ jobs:
         coverage xml -i -o coverage.xml
 
     - name: Handle coverage
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@v3.1.5
       with:
         files: ./coverage.xml
         flags: functional_test