add --kernel-version option

[kconfig-hardened-check.git] / .github / workflows / functional_test.yml

diff --git a/.github/workflows/functional_test.yml b/.github/workflows/functional_test.yml
index 5e8c1816063b74da88d5b562ae21e00e5537ab54..d8fe1db7956f3d7c1507121f901626c48927a083 100644 (file)
--- a/.github/workflows/functional_test.yml
+++ b/.github/workflows/functional_test.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     strategy:
-      max-parallel: 3
+      max-parallel: 1
       fail-fast: false
       matrix:
         # Current ubuntu-latest (Ubuntu 22.04) provides the following versions of Python:
@@ -29,13 +29,14 @@ jobs:
       run: |
         python -m pip install --upgrade pip
         echo "Install the package via pip..."
-        pip --verbose install git+https://github.com/a13xp0p0v/kconfig-hardened-check
+        pip --verbose install git+https://github.com/a13xp0p0v/kernel-hardening-checker
         echo "Run the installed tool..."
-        kconfig-hardened-check
+        kernel-hardening-checker
 
     - name: Check all configs with the installed tool
       run: |
         echo "Check all configs with the installed tool..."
+        sysctl -a > /tmp/sysctls
         CONFIG_DIR=`find /opt/hostedtoolcache/Python/ -name config_files`
         KCONFIGS=`find $CONFIG_DIR -type f | grep -e "\.config" -e "\.gz"`
         COUNT=0
@@ -43,7 +44,7 @@ jobs:
         do
                 COUNT=$(expr $COUNT + 1)
                 echo -e "\n>>>>> checking kconfig number $COUNT <<<<<"
-                kconfig-hardened-check -c $C -l /proc/cmdline
+                kernel-hardening-checker -c $C -l /proc/cmdline -s /tmp/sysctls
         done
         echo -e "\nHave checked $COUNT kconfigs"