1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00

Add make test-annocheck to detect security issues.

* Note that as the annocheck binary package is not available on Ubuntu, and it
  is working in progress in Debian, the script uses Fedora container, and
  it requires docker or podman command.
  https://www.debian.org/devel/wnpp/itp.en.html
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926470
* .github/workflows/compilers.yml: Add "gcc-11 annocheck" case.
  To pass the CI, set `TEST_ANNOCHECK_OPTS: "--skip-pie --skip-notes"` for now.
  See <https://bugs.ruby-lang.org/issues/18061>.
* Skip MJIT tests in case of annocheck case.
  The MJIT tests fail in the annocheck case.
  See <https://bugs.ruby-lang.org/issues/18781>.
This commit is contained in:
Jun Aruga 2022-05-10 16:34:08 +02:00 committed by Jun Aruga
parent 36efb2a146
commit dccfff943c
Notes: git 2022-05-16 17:10:46 +09:00
5 changed files with 73 additions and 0 deletions

View file

@ -0,0 +1,4 @@
FROM docker.io/fedora:latest
RUN dnf -y install annobin-annocheck
WORKDIR /work