Commit Graph

225 Commits (401d895b1dd59417a32836c622663f7e35031879)

Author SHA1 Message Date
Jason Ish ebdf482580 github-ci: add CentOS Stream builders
Builders for CentOS Stream 8 and 9.
2 years ago
Jason Ish ca68b6b994 github-ci: replace dist builder with Debian 12
Add new dist builder job based on Debian 12. Debian 12 gives us news
Sphinx that AlmaLinux 8, plus avoids any potential disruption in the
RHEL rebuild ecosystem.

Also make dist building its own job so it finishes quicker, allowing
other jobs to proceed.  The new non-dist building Debian 12 job will
still do a complete distcheck, as do other jobs.
2 years ago
Jason Ish 96dd6a7ca0 github-ci: add Debian 12 builder 2 years ago
Jason Ish f870dcd4cc github-ci: allow pull request URL in SV_BRANCH
Allow the SV_BRANCH variable to contain the full link to an
OISF/suricata-verify pull request. This will cause GitHub to create a
cross-link for us.
2 years ago
Jason Ish 83afccd932 github-ci: update action: setup-msys2
Use @v2, hopefully the dependency bot will keep it up to date now.
2 years ago
Jason Ish 37d68230f8 github-ci: use latest version of actions/upload-artifact 2 years ago
Jason Ish d576be2452 github-ci: update actions/cache to v3.3.1 2 years ago
Jason Ish 3dfd5ddaed github-ci: use same version (3.0.2) for actions/download-artifact 2 years ago
Jason Ish 04ba1a7ef6 github-ci: update actions/checkout to v3.5.3 2 years ago
Jason Ish 6d7923c80b github-ci: check for suricata-update example configuration files
Check that the Suricata-Update example configuration files are
installed.
2 years ago
Jason Ish f8c54bc7a4 github-ci: add workflow_dispatch
A workflow dispatch allows us to manually a trigger a workflow with
arguments. This dispatch allows us to use the "gh" cli command to
trigger a workflow run with our libhtp/su/sv branch and repo variables
set. For example:

  gh run builds.yml -f SV_REPO=jasonish/suricata-verify -f SV_BRANCH=pr/10
2 years ago
Philippe Antoine bc3311329c github: change codeowners back to team
as in master-6.0.x
2 years ago
Jason Ish af5a0e11e8 github-ci: check for new authors in pull-request
On pull request, get a list of commit authors for the pull request and
compare to the list of authors in git master. If any differ, save to
new-authors.txt and upload this as an artifact.

As a workflow-run, download this artifact and if non-empty, add a
comment to the pull-request that new authors may be part of the pull
request.

This 2 step approach is because GitHub actions running in pull-request
context are not allowed to comment on the pull request, instead a
post-workflow workflow has been added that runs in the context of the
repo which can then comment on the pull request.
2 years ago
Jason Ish cc3f3a0a72 github-ci: fix rust check by fixing git directory permissions
Due to the update to AlmaLinux 9.2, a new version of git with stricter
permissions was introduced.  Mark the directory as safe as we have
done in other builds with newer versions of it.
2 years ago
Alex 60902236e4 build: harden rust.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
2 years ago
Victor Julien 74326a43e7 github-ci: add windivert build 2 years ago
Victor Julien fb7ff5b61c github-ci: spelling 2 years ago
Victor Julien cb66a1e636 github-ci: add padding check to scan-build 2 years ago
Victor Julien d0d6ca4c6e github-ci: add more scan-build checks
Explicitly disable:
security.insecureAPI.DeprecatedOrUnsafeBufferHandling
optin.performance.Padding
2 years ago
Victor Julien fb237e8de3 github-ci: add dpdk, nfqueue, nflog to scan-build 2 years ago
Victor Julien e717c2e0ec github-ci: remove debian 9 as it is EOL 2 years ago
Jason Ish 915f487a1c github-ci: update Fedora 36 cov build to Fedora 38
As Fedora 36 will be EOL in a month.
2 years ago
Jason Ish bcbceb13f8 github-ci: update non-root build to Fedora 37
As Fedora 36 will be EOL in a month.
2 years ago
Jason Ish b0bc95d7c1 github-ci: add Fedora 38 builds 2 years ago
Jason Ish 3974142b41 github-ci: use cbindgen from packages on almalinux:9
AlmaLinux 9 has cbindgen available from the package repositories.
2 years ago
Jason Ish fa651606a0 github-ci: add Fedora 37 builders 2 years ago
Jason Ish 4105ac436e github-ci: add Fedora 36 gcc builder
The existing Fedora 36 builder used clang. Add a gcc builder as it can
show different errors.
2 years ago
Jason Ish 04fb0189a7 github-ci: replace Fedora no-jansson build with AlmaLinux
Use AlmaLinux 9 for the no-jansson test instead of Fedora as it will
need to be updated much less.
2 years ago
Jason Ish dd72a64c53 github-ci: remove Fedora 35 build: EOL 2 years ago
Jason Ish e32d01d01b github-ci: enable asan for Ubuntu debug-validation test 2 years ago
Jason Ish 497a6e7ab7 github-ci: fedora non-root: remove external script usage
In the end, its not needed and makes it easier to copy and paste to a
new test.
2 years ago
Jason Ish ec253e54cc github-ci: use bundle.sh script for libhtp, suricata-update
Update the GitHub CI workflow to use the bundle.sh script to pull in
Suricata-Update and libhtp. This means one less place where defaults
are hardcoded and can get out of sync.

This also simplifies the variable names that can be embedded in a pull
request message to use the same variable names that bundle.sh
expects. Of note, this removes the _PR variant, instead a branch name
of "pr/N" can be used to specify a PR.
2 years ago
Victor Julien efeaa6e2c7 github: add scan-build workflow
Add scan-build workflow that fails on any warning.

Exclude libhtp as there is still one open issue there.
2 years ago
Lukas Sismis 4f3e1279f5 github-ci: Add Netmap build to GH actions
Issue: #5803
2 years ago
Jason Ish b734676617 github-ci: add Debian 11 builder with XDP 2 years ago
Philippe Antoine 96b48d7104 github: avoid bash escaping
so as to allow ' in github discussion and get CI green
2 years ago
Jason Ish 2dc157ed9e github-ci: dump github context and pr body
For debugging the parsing of suricata-verify-pr.
2 years ago
Jason Ish 102a022898 github-ci: annotate job with s-v info 2 years ago
Jason Ish 3d8130614e github-ci/rust: display clippy diff 2 years ago
Jason Ish 49e9f51a03 github-ci: fedora non-root: suricata-verify -q
Run Suricata-Verify in quiet mode for the non-root build to more
easily find the error when fails.
2 years ago
Lukas Sismis 1c8205e6b1 dpdk: add Github action to build Suricata with all available (LTS) DPDK versions 2 years ago
dependabot[bot] 8bebc2390d github-actions: bump ossf/scorecard-action from 2.1.1 to 2.1.2
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.1 to 2.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](15c10fcf1c...e38b1902ae)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] ad7baad4a0 github-actions: bump actions/download-artifact from 3.0.1 to 3.0.2
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](9782bd6a98...9bc31d5ccc)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] 87420c8083 github-actions: bump actions/upload-artifact from 3.1.1 to 3.1.2
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](83fd05a356...0b7f8abb15)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] c091e65662 github-actions: bump actions/checkout from 3.2.0 to 3.3.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] fc177754d1 github-actions: bump ossf/scorecard-action from 2.0.6 to 2.1.1
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.6 to 2.1.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](99c53751e0...15c10fcf1c)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] b4538134fa github-actions: bump actions/checkout from 3.1.0 to 3.2.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Juliana Fajardini 8b56f688a1 github: update contrib guide link in PR template
Even though we have moved the contribution process guide to our read the
docs, the template was still pointing to our redmine link.
2 years ago
Jason Ish a2a920afb0 github-ci: verify generated rust code is rustfmt and clippy clean 2 years ago
Jason Ish 712d80107f setup-app-layer: remove generator for C parsers
Ticket: 4939
2 years ago