X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=.woodpecker%2Ffunctional_test.yml;h=17272f5fc4e86d8a23424cc677b0472ce3c6c3a7;hb=04f7596cfa16efb6cfb2fb8d6a56a55574489ecf;hp=ebd631ac6a0bc7f317ade3ca062794e670d17541;hpb=b266de5d93d81e6adf4169c7aad4fb636ed6f301;p=kconfig-hardened-check.git diff --git a/.woodpecker/functional_test.yml b/.woodpecker/functional_test.yml index ebd631a..17272f5 100644 --- a/.woodpecker/functional_test.yml +++ b/.woodpecker/functional_test.yml @@ -1,5 +1,5 @@ # .woodpecker.yml -pipeline: +steps: installation-test: image: python:3 pull: true @@ -10,13 +10,25 @@ pipeline: - ls -la - python --version - echo "Install the package via pip..." - - pip --verbose install --no-cache-dir git+https://github.com/a13xp0p0v/kconfig-hardened-check + - pip --verbose install --no-cache-dir git+https://github.com/a13xp0p0v/kernel-hardening-checker - echo "Run the installed tool..." - - which kconfig-hardened-check - - kconfig-hardened-check + - which kernel-hardening-checker + - kernel-hardening-checker - echo "Check all configs with the installed tool..." + - sysctl -a > /tmp/sysctls - CONFIG_DIR=`find /usr/local/lib/ -name config_files` - - KCONFIGS=`find $CONFIG_DIR -type f | grep "\.config"` + - KCONFIGS=`find $CONFIG_DIR -type f | grep -e "\.config" -e "\.gz"` - COUNT=0 - - for C in $KCONFIGS; do COUNT=$(expr $COUNT + 1); echo ">>>>> checking kconfig number $COUNT <<<<<"; kconfig-hardened-check -c $C -l /proc/cmdline; done - - echo ">>>>> have checked $COUNT kconfigs <<<<<" + - for C in $KCONFIGS; do COUNT=$(expr $COUNT + 1); echo ">>>>> checking kconfig number $COUNT <<<<<"; kernel-hardening-checker -c $C -l /proc/cmdline -s /tmp/sysctls; done + - echo "Have checked $COUNT kconfigs" + functional-test-with-coverage: + image: python:3 + pull: true + commands: + - echo "Install the coverage tool..." + - python --version + - pip install --no-cache-dir coverage + - echo "Run the functional tests and collect the coverage..." + - sh .github/workflows/functional_test.sh + - echo "Show the coverage report..." + - coverage report