c53086575a
dpdk: update DPDK builder versions
1 year ago
e65c052414
build/nss: Remove libnss from CI
2 years ago
a4f670622e
workflows: use s-v --debug-failed
2 years ago
ae5c65fb49
github-ci: disable some workflows on doc only changes
...
Don't run the following GitHub workflows on documentation only
changes:
- cifuzz
- codeql
- formatting
- rust
- scan-build
2 years ago
049aed529f
meta-docs: update links
...
Readme and PR template was still pointing to the redmine wiki and
readthedocs, replace with docs.suricata links.
2 years ago
f511b176bf
github-ci: don't build docs in almalinux:8, centos:8
...
Our docs require a newer version of Sphinx.
2 years ago
7f822ba053
github-ci: run cocci in fedora 38
2 years ago
4ccc9aed01
github-ci: remove fedora 36 builds
...
Fedora 36 is now EOL.
2 years ago
84674f4205
github-ci: update rust versions
...
New minimum Rust version: 1.63.0.
Current latest known good version: 1.70.0.
Add test specifically for MSRV as we didn't have one.
Ticket: #4163
2 years ago
ebdf482580
github-ci: add CentOS Stream builders
...
Builders for CentOS Stream 8 and 9.
2 years ago
ca68b6b994
github-ci: replace dist builder with Debian 12
...
Add new dist builder job based on Debian 12. Debian 12 gives us news
Sphinx that AlmaLinux 8, plus avoids any potential disruption in the
RHEL rebuild ecosystem.
Also make dist building its own job so it finishes quicker, allowing
other jobs to proceed. The new non-dist building Debian 12 job will
still do a complete distcheck, as do other jobs.
2 years ago
96dd6a7ca0
github-ci: add Debian 12 builder
2 years ago
f870dcd4cc
github-ci: allow pull request URL in SV_BRANCH
...
Allow the SV_BRANCH variable to contain the full link to an
OISF/suricata-verify pull request. This will cause GitHub to create a
cross-link for us.
2 years ago
83afccd932
github-ci: update action: setup-msys2
...
Use @v2, hopefully the dependency bot will keep it up to date now.
2 years ago
37d68230f8
github-ci: use latest version of actions/upload-artifact
2 years ago
d576be2452
github-ci: update actions/cache to v3.3.1
2 years ago
3dfd5ddaed
github-ci: use same version (3.0.2) for actions/download-artifact
2 years ago
04ba1a7ef6
github-ci: update actions/checkout to v3.5.3
2 years ago
6d7923c80b
github-ci: check for suricata-update example configuration files
...
Check that the Suricata-Update example configuration files are
installed.
2 years ago
f8c54bc7a4
github-ci: add workflow_dispatch
...
A workflow dispatch allows us to manually a trigger a workflow with
arguments. This dispatch allows us to use the "gh" cli command to
trigger a workflow run with our libhtp/su/sv branch and repo variables
set. For example:
gh run builds.yml -f SV_REPO=jasonish/suricata-verify -f SV_BRANCH=pr/10
2 years ago
bc3311329c
github: change codeowners back to team
...
as in master-6.0.x
2 years ago
af5a0e11e8
github-ci: check for new authors in pull-request
...
On pull request, get a list of commit authors for the pull request and
compare to the list of authors in git master. If any differ, save to
new-authors.txt and upload this as an artifact.
As a workflow-run, download this artifact and if non-empty, add a
comment to the pull-request that new authors may be part of the pull
request.
This 2 step approach is because GitHub actions running in pull-request
context are not allowed to comment on the pull request, instead a
post-workflow workflow has been added that runs in the context of the
repo which can then comment on the pull request.
2 years ago
cc3f3a0a72
github-ci: fix rust check by fixing git directory permissions
...
Due to the update to AlmaLinux 9.2, a new version of git with stricter
permissions was introduced. Mark the directory as safe as we have
done in other builds with newer versions of it.
2 years ago
60902236e4
build: harden rust.yml permissions
...
Signed-off-by: Alex <aleksandrosansan@gmail.com>
2 years ago
74326a43e7
github-ci: add windivert build
2 years ago
fb7ff5b61c
github-ci: spelling
2 years ago
cb66a1e636
github-ci: add padding check to scan-build
2 years ago
d0d6ca4c6e
github-ci: add more scan-build checks
...
Explicitly disable:
security.insecureAPI.DeprecatedOrUnsafeBufferHandling
optin.performance.Padding
2 years ago
fb237e8de3
github-ci: add dpdk, nfqueue, nflog to scan-build
2 years ago
e717c2e0ec
github-ci: remove debian 9 as it is EOL
2 years ago
915f487a1c
github-ci: update Fedora 36 cov build to Fedora 38
...
As Fedora 36 will be EOL in a month.
2 years ago
bcbceb13f8
github-ci: update non-root build to Fedora 37
...
As Fedora 36 will be EOL in a month.
2 years ago
b0bc95d7c1
github-ci: add Fedora 38 builds
2 years ago
3974142b41
github-ci: use cbindgen from packages on almalinux:9
...
AlmaLinux 9 has cbindgen available from the package repositories.
2 years ago
fa651606a0
github-ci: add Fedora 37 builders
2 years ago
4105ac436e
github-ci: add Fedora 36 gcc builder
...
The existing Fedora 36 builder used clang. Add a gcc builder as it can
show different errors.
2 years ago
04fb0189a7
github-ci: replace Fedora no-jansson build with AlmaLinux
...
Use AlmaLinux 9 for the no-jansson test instead of Fedora as it will
need to be updated much less.
2 years ago
dd72a64c53
github-ci: remove Fedora 35 build: EOL
2 years ago
e32d01d01b
github-ci: enable asan for Ubuntu debug-validation test
2 years ago
497a6e7ab7
github-ci: fedora non-root: remove external script usage
...
In the end, its not needed and makes it easier to copy and paste to a
new test.
2 years ago
ec253e54cc
github-ci: use bundle.sh script for libhtp, suricata-update
...
Update the GitHub CI workflow to use the bundle.sh script to pull in
Suricata-Update and libhtp. This means one less place where defaults
are hardcoded and can get out of sync.
This also simplifies the variable names that can be embedded in a pull
request message to use the same variable names that bundle.sh
expects. Of note, this removes the _PR variant, instead a branch name
of "pr/N" can be used to specify a PR.
2 years ago
efeaa6e2c7
github: add scan-build workflow
...
Add scan-build workflow that fails on any warning.
Exclude libhtp as there is still one open issue there.
2 years ago
4f3e1279f5
github-ci: Add Netmap build to GH actions
...
Issue: #5803
2 years ago
b734676617
github-ci: add Debian 11 builder with XDP
2 years ago
96b48d7104
github: avoid bash escaping
...
so as to allow ' in github discussion and get CI green
2 years ago
2dc157ed9e
github-ci: dump github context and pr body
...
For debugging the parsing of suricata-verify-pr.
2 years ago
102a022898
github-ci: annotate job with s-v info
2 years ago
3d8130614e
github-ci/rust: display clippy diff
2 years ago
49e9f51a03
github-ci: fedora non-root: suricata-verify -q
...
Run Suricata-Verify in quiet mode for the non-root build to more
easily find the error when fails.
2 years ago
1c8205e6b1
dpdk: add Github action to build Suricata with all available (LTS) DPDK versions
2 years ago
8bebc2390d
github-actions: bump ossf/scorecard-action from 2.1.1 to 2.1.2
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.1.1 to 2.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](15c10fcf1c...e38b1902ae
2 years ago
ad7baad4a0
github-actions: bump actions/download-artifact from 3.0.1 to 3.0.2
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](9782bd6a98...9bc31d5ccc
2 years ago
87420c8083
github-actions: bump actions/upload-artifact from 3.1.1 to 3.1.2
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](83fd05a356...0b7f8abb15
2 years ago
c091e65662
github-actions: bump actions/checkout from 3.2.0 to 3.3.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.2.0...v3.3.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
fc177754d1
github-actions: bump ossf/scorecard-action from 2.0.6 to 2.1.1
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.0.6 to 2.1.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](99c53751e0...15c10fcf1c
2 years ago
b4538134fa
github-actions: bump actions/checkout from 3.1.0 to 3.2.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
8b56f688a1
github: update contrib guide link in PR template
...
Even though we have moved the contribution process guide to our read the
docs, the template was still pointing to our redmine link.
2 years ago
a2a920afb0
github-ci: verify generated rust code is rustfmt and clippy clean
2 years ago
712d80107f
setup-app-layer: remove generator for C parsers
...
Ticket: 4939
2 years ago
986212c19d
github-ci: add app-layer-template builder
...
Creates a protocol parser and logger and builds.
2 years ago
23424821be
github-ci: rename alma to almalinux; 8.4 to 8
2 years ago
aa36e9e37f
github-ci: enable lua on Fedora 36 build
...
Not many of the jobs that run S-V enable Lua, enable Lua for Fedora 36
which also runs S-V.
2 years ago
01badea65c
github-ci: fail if cargo clippy --fix creates a changes
...
Previously this was doing fixups and only warning, not erroring. Which
could made the following clippy command pass.
2 years ago
9b43481680
af-xdp: Configure build with AF_XDP support
2 years ago
64fab3be04
github-ci: non-root builder
...
All the GitHub CI jobs run as root inside a container. This means the
testing is done in a different environment than a developer typically
uses, running as a user.
Add a job that does the build as a non-root user.
2 years ago
bf1c185c03
github-ci/centos:7: cache yum RPMs
2 years ago
1c13efb8d4
github-ci/windows: cache cargo artifacts
2 years ago
6da066cc53
github-ci/macos: don't force cbindgen
...
We want to use binary from the cache if available.
2 years ago
0dddfbc8e6
github-ci: cache RPMs on dnf distros
2 years ago
814a76a217
github-ci: better .cargo caching
2 years ago
222f2ac1c5
ci: remove unnecessary write permission to github workflow
2 years ago
7fd3aaa81c
ci: build with -Werror for -Wimplicit-int-conversion
...
So that CI gets red
2 years ago
7cfc45a6f8
ci: adds one build with hyperscan
2 years ago
fbccd74f89
ci: adds build with luajit
2 years ago
ce66c26afc
ci: cargo clippy run option
...
As clippy does not recognize git which is above
2 years ago
6a9b7cf977
github-actions: bump actions/cache from 3.0.10 to 3.0.11
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.0.10 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v3.0.10...9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
9c2939fb33
workflow: add systemd integration and check
...
Intergration of systemd is a feature that enables notification of
a running service to the service manager. The workflow now ensures
compilation with systemd and checks the binary has been built against
libsystemd.
2 years ago
c3c8472d09
github-actions: bump actions/upload-artifact from 3.1.0 to 3.1.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](3cea537223...83fd05a356
2 years ago
0b0616528f
github-actions: bump actions/download-artifact from 3.0.0 to 3.0.1
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](fb598a63ae...9782bd6a98
2 years ago
a11f51f4d3
github-ci: running clippy with all features
...
Without it, it own't see the usage of variables in SCDebugLog macros,
etc.
2 years ago
cb8c9d9617
github-actions: bump ossf/scorecard-action from 2.0.4 to 2.0.6
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.0.4 to 2.0.6.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](e363bfca00...99c53751e0
2 years ago
2158dbf3ba
github-actions: bump actions/checkout from 2 to 3.1.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3.1.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
2681d21c11
github-actions: bump actions/cache from 3.0.8 to 3.0.10
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.0.8 to 3.0.10.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](fd5de65bc8...56461b9eb0
2 years ago
05900b99cd
github-ci: add workflow for rust clippy
2 years ago
7771402a3a
github-actions: bump codecov/codecov-action from 3.1.0 to 3.1.1
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md )
- [Commits](81cd2dc814...d9f34f8cd5
2 years ago
5490fe00ab
github-actions: bump ossf/scorecard-action from 2.0.3 to 2.0.4
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.0.3 to 2.0.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](865b409285...e363bfca00
2 years ago
eb155639c6
ci: build with -Wimplicit-int-conversion
...
Seems to have got lost on the way in CFLAGS
2 years ago
ad6bea5108
github-ci/codecov: add rust coverage support
...
Based on Rust 1.63 and LLVM 14. Update the jobs to meet those requirements.
Includes the bundled libhtp coverage now, including libhtp tests.
Ticket: #4278 .
2 years ago
2d308c000d
github-ci: disable cppclean as it is too noisy
...
We can reenable it after the larger cleanup efforts are complete.
2 years ago
30ce63c50f
github-actions: bump ossf/scorecard-action from 1.1.2 to 2.0.3
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 1.1.2 to 2.0.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](ce330fde6b...865b409285
2 years ago
6e1220700d
github-ci: bump cbindgen to 0.24.3
...
This addresses issues around the AppLayerTxData type.
2 years ago
7be28aebc6
github-actions: bump actions/cache from 3.0.7 to 3.0.8
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.0.7 to 3.0.8.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](a7c34adf76...fd5de65bc8
3 years ago
9353b07292
github: update Rust versions
3 years ago
3dea69ec83
github: bump ubuntu-18.04 runners to 22.04
3 years ago
c8cf25a21a
github-actions: bump actions/cache from 3.0.6 to 3.0.7
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.0.6 to 3.0.7.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v3.0.6...a7c34adf76222e77931dedbf4a45b2e4648ced19 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 years ago
2b83cc799d
github-ci: add AlmaLinux 9 build
3 years ago
d9b6e1d967
github-ci: test execution of suricatasc and suricata-update
3 years ago
8bf45c5f74
github-actions: bump actions/cache from 3.0.5 to 3.0.6
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.0.5 to 3.0.6.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](0865c47f36...f4278025ab
3 years ago
e1e03c25c9
ci: update to macos latest
3 years ago
f3d3274e92
github-ci: enable nfqueue on fedora 36 build
3 years ago
Lukas Sismis
Jeff Lucovsky
Shivani Bhardwaj
Jason Ish
Juliana Fajardini
Victor Julien
Philippe Antoine
Alex
Lukas Sismis
dependabot[bot]
Richard McConnell