ruby--ruby/tool/annocheck/Dockerfile-copy at c49fde351fb215d8f9fc2f82893a4469692f2e98 - kotovalexarian-likes-github/ruby--ruby - Forgejo by Causa Arcana

kotovalexarian-likes-github/ruby--ruby

mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00

Jun Aruga dccfff943c Add make test-annocheck to detect security issues.

* Note that as the annocheck binary package is not available on Ubuntu, and it
  is working in progress in Debian, the script uses Fedora container, and
  it requires docker or podman command.
  https://www.debian.org/devel/wnpp/itp.en.html
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926470
* .github/workflows/compilers.yml: Add "gcc-11 annocheck" case.
  To pass the CI, set `TEST_ANNOCHECK_OPTS: "--skip-pie --skip-notes"` for now.
  See <https://bugs.ruby-lang.org/issues/18061>.
* Skip MJIT tests in case of annocheck case.
  The MJIT tests fail in the annocheck case.
  See <https://bugs.ruby-lang.org/issues/18781>.

2022-05-16 10:10:16 +02:00

7 lines

127 B

Text

Raw Blame History

 FROM docker.io/fedora:latest
 ARG FILES
 RUN dnf -y install annobin-annocheck
 RUN mkdir /work
 COPY ${FILES} /work
 WORKDIR /work