Update the README (add the --sysctl mode)

[kconfig-hardened-check.git] / .woodpecker / functional_test.yml

diff --git a/.woodpecker/functional_test.yml b/.woodpecker/functional_test.yml
index a41068e50e7587af50f79b2862d006dd4f289a42..b7d014f1bde171cb6842cf641142853adb35391b 100644 (file)
--- a/.woodpecker/functional_test.yml
+++ b/.woodpecker/functional_test.yml
@@ -1,5 +1,5 @@
 # .woodpecker.yml
-pipeline:
+steps:
   installation-test:
     image: python:3
     pull: true
@@ -15,11 +15,12 @@ pipeline:
       - which kconfig-hardened-check
       - kconfig-hardened-check
       - echo "Check all configs with the installed tool..."
+      - sysctl -a > /tmp/sysctls
       - CONFIG_DIR=`find /usr/local/lib/ -name config_files`
       - KCONFIGS=`find $CONFIG_DIR -type f | grep -e "\.config" -e "\.gz"`
       - COUNT=0
-      - for C in $KCONFIGS; do COUNT=$(expr $COUNT + 1); echo ">>>>> checking kconfig number $COUNT <<<<<"; kconfig-hardened-check -c $C -l /proc/cmdline; done
-      - echo ">>>>> have checked $COUNT kconfigs <<<<<"
+      - for C in $KCONFIGS; do COUNT=$(expr $COUNT + 1); echo ">>>>> checking kconfig number $COUNT <<<<<"; kconfig-hardened-check -c $C -l /proc/cmdline -s /tmp/sysctls; done
+      - echo "Have checked $COUNT kconfigs"
   functional-test-with-coverage:
     image: python:3
     pull: true
@@ -29,4 +30,5 @@ pipeline:
       - pip install --no-cache-dir coverage
       - echo "Run the functional tests and collect the coverage..."
       - sh .github/workflows/functional_test.sh
+      - echo "Show the coverage report..."
       - coverage report