X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=.woodpecker%2Ffunctional_test.yml;h=17272f5fc4e86d8a23424cc677b0472ce3c6c3a7;hb=fd4c2f8a1bb754514c166efbd3a0029f8d97a91c;hp=7f703281c12ecf1246d373bac1e8d74718ccbbbf;hpb=fb93b0f133fc5897a879142a88aa63373f43b6ff;p=kconfig-hardened-check.git diff --git a/.woodpecker/functional_test.yml b/.woodpecker/functional_test.yml index 7f70328..17272f5 100644 --- a/.woodpecker/functional_test.yml +++ b/.woodpecker/functional_test.yml @@ -1,5 +1,5 @@ # .woodpecker.yml -pipeline: +steps: installation-test: image: python:3 pull: true @@ -10,15 +10,16 @@ pipeline: - ls -la - python --version - echo "Install the package via pip..." - - pip --verbose install --no-cache-dir git+https://github.com/a13xp0p0v/kconfig-hardened-check + - pip --verbose install --no-cache-dir git+https://github.com/a13xp0p0v/kernel-hardening-checker - echo "Run the installed tool..." - - which kconfig-hardened-check - - kconfig-hardened-check + - which kernel-hardening-checker + - kernel-hardening-checker - echo "Check all configs with the installed tool..." + - sysctl -a > /tmp/sysctls - CONFIG_DIR=`find /usr/local/lib/ -name config_files` - KCONFIGS=`find $CONFIG_DIR -type f | grep -e "\.config" -e "\.gz"` - COUNT=0 - - for C in $KCONFIGS; do COUNT=$(expr $COUNT + 1); echo ">>>>> checking kconfig number $COUNT <<<<<"; kconfig-hardened-check -c $C -l /proc/cmdline; done + - for C in $KCONFIGS; do COUNT=$(expr $COUNT + 1); echo ">>>>> checking kconfig number $COUNT <<<<<"; kernel-hardening-checker -c $C -l /proc/cmdline -s /tmp/sysctls; done - echo "Have checked $COUNT kconfigs" functional-test-with-coverage: image: python:3