X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=.github%2Fworkflows%2Fmain.yml;h=00640dfdcca176a008af18db94d6f57575a3b596;hb=dc925368f53175636645ade2d21341ec9b2475d0;hp=3fc63ee3137e62268797d8e4cc445ad9303b98be;hpb=fcf34162f89c9618c2c29589991b0f94e74a5d6a;p=kconfig-hardened-check.git diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 3fc63ee..00640df 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -15,13 +15,13 @@ jobs: max-parallel: 4 fail-fast: false matrix: - python-version: [3.6, 3.7, 3.8, 3.9] - # github runner with python 3.5 currently fails to install this package + # Current ubuntu-latest (Ubuntu 22.04) provides the following versions of Python: + python-version: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v1 + uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} @@ -48,7 +48,7 @@ jobs: echo -e "\n>>>>> checking $COUNT configs is done <<<<<" - name: Get source code for collecting coverage - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Collect coverage for the basic functionality run: | @@ -87,6 +87,8 @@ jobs: do COUNT=$(expr $COUNT + 1) echo -e "\n>>>>> checking config number $COUNT <<<<<" + coverage run -a --branch bin/kconfig-hardened-check -c $C + coverage run -a --branch bin/kconfig-hardened-check -c $C -m verbose > /dev/null coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline -m verbose > /dev/null coverage run -a --branch bin/kconfig-hardened-check -c $C -l /proc/cmdline -m json @@ -100,21 +102,64 @@ jobs: echo ">>>>> lonely -l <<<<<" ! coverage run -a --branch bin/kconfig-hardened-check -l /proc/cmdline - echo ">>>>> wrong modes for -p <<<<<" + echo ">>>>> wrong modes for -p <<<<<" ! coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -m show_ok ! coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -m show_fail echo ">>>>> -p and -c together <<<<<" - ! ./bin/kconfig-hardened-check -p X86_64 -c kconfig_hardened_check/config_files/distros/fedora_34.config + ! coverage run -a --branch bin/kconfig-hardened-check -p X86_64 -c kconfig_hardened_check/config_files/distros/fedora_34.config + + cp kconfig_hardened_check/config_files/distros/fedora_34.config ./test.config + + echo ">>>>> no kernel version <<<<<" + sed '3d' test.config > error.config + ! coverage run -a --branch bin/kconfig-hardened-check -c error.config + + echo ">>>>> strange kernel version string <<<<<" + sed '3 s/5./version 5./' test.config > error.config + ! coverage run -a --branch bin/kconfig-hardened-check -c error.config + + echo ">>>>> no arch <<<<<" + sed '305d' test.config > error.config + ! coverage run -a --branch bin/kconfig-hardened-check -c error.config + + echo ">>>>> more than one arch <<<<<" + cp test.config error.config + echo 'CONFIG_ARM64=y' >> error.config + ! coverage run -a --branch bin/kconfig-hardened-check -c error.config + + echo ">>>>> invalid disabled kconfig option <<<<<" + sed '28 s/is not set/is not set yet/' test.config > error.config + ! coverage run -a --branch bin/kconfig-hardened-check -c error.config + + echo ">>>>> invalid enabled kconfig option <<<<<" + cp test.config error.config + echo 'CONFIG_FOO=is not set' >> error.config + ! coverage run -a --branch bin/kconfig-hardened-check -c error.config + + echo ">>>>> one config option multiple times <<<<<" + cp test.config error.config + echo 'CONFIG_BUG=y' >> error.config + ! coverage run -a --branch bin/kconfig-hardened-check -c error.config + + echo ">>>>> invalid compiler versions <<<<<" + cp test.config error.config + sed '8 s/CONFIG_CLANG_VERSION=0/CONFIG_CLANG_VERSION=120000/' test.config > error.config + ! coverage run -a --branch bin/kconfig-hardened-check -c error.config + + echo ">>>>> multi-line cmdline file <<<<<" + echo 'hey man 1' > cmdline + echo 'hey man 2' >> cmdline + ! coverage run -a --branch bin/kconfig-hardened-check -c test.config -l cmdline - name: Prepare final coverage report run: | coverage xml -i -o coverage.xml - name: Handle coverage - uses: codecov/codecov-action@v2 + uses: codecov/codecov-action@v3 with: - file: ./coverage.xml + files: ./coverage.xml flags: functional_test name: codecov-umbrella fail_ci_if_error: true