26cf56bf54
github-ci: consolidate new authors check into a single workflow
...
Replace the two-workflow pattern (authors.yml + authors-done.yml) with a
single pull_request_target workflow.
I'm not sure this was possible when this job was originally created, but
apparently it is now.
4 months ago
1eff94f2b2
github-ci: add gcc analyzer build
...
Make sure to not run against lua rust crate build, as it's not clean.
5 months ago
39688a6252
github-actions: bump codecov/codecov-action from 6.0.1 to 7.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](e79a6962e0...fb8b3582c8
5 months ago
6150d61d79
github-actions: bump github/codeql-action from 4.36.1 to 4.36.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.36.1...v4.36.2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
0eda09f302
github-actions: bump codecov/codecov-action from 6.0.0 to 6.0.1
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](57e3a136b7...e79a6962e0
5 months ago
aa24d7022b
github-actions: bump github/codeql-action from 4.35.3 to 4.36.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.3 to 4.36.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.35.3...v4.36.1 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
87a1521019
github-actions: bump actions/checkout from 6.0.2 to 6.0.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
9febbf6149
github-actions: bump vmactions/freebsd-vm from 1.4.5 to 1.4.6
...
Bumps [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm ) from 1.4.5 to 1.4.6.
- [Release notes](https://github.com/vmactions/freebsd-vm/releases )
- [Commits](d1e6581156...a6de9343ef
5 months ago
c8a86cdffa
ci: move rustfmt to a helper script
5 months ago
7ec82740cd
github-ci: cancel previous nix workflow for branch
...
On push, cancel previous nix workflows for the same branch.
5 months ago
c0fd86f5b6
github-ci: close PRs updated after being opened
...
Enforce our policy of requiring a new pull request whenever changes are
made to an existing one. On any push to an open, non-draft pull request
the workflow comments with the policy and closes the pull request.
5 months ago
3806bf4260
util-time: relocate timestamp format unit test from log-cf-common
...
log-cf-common is not longer needed with the removal of http-log, but this test
is still valid, so move until util-time.
5 months ago
781bd5184e
clang-format: support clang 17
...
Update Github CI runner to use it.
Bump to Ubuntu 24.04 as well.
5 months ago
73193c7e6a
rust: format pgsql files
...
Ticket: 3836
5 months ago
3bfe6cf4b9
rust: format nfs files
...
Ticket: 3836
5 months ago
f269e22b67
github-ci: add coverage reporting for the rust example plugin
...
Should help reporting coverage on the ffi wrappers only used by plugins.
5 months ago
07112bc7ae
rust: format mqtt files
...
Ticket: 3836
5 months ago
844f2effa3
rust: format modbus files
...
Ticket: 3836
5 months ago
db019ebefe
rust: format ike files
...
Ticket: 3836
5 months ago
bcc1e6ae32
rust: format http2 files
...
Ticket: 3836
5 months ago
a35760db9b
rust: enforce already formatted directories in CI
5 months ago
1070e733d8
rust: format websocket files
...
Ticket: 3836
5 months ago
89e5332d88
rust: format utils files
...
Ticket: 3836
5 months ago
edf29b0000
rust: format ssh files
...
Ticket: 3836
5 months ago
fe27a2159c
rust: format rfb files
...
Ticket: 3836
5 months ago
5cca346f16
rust: format quic files
...
Ticket: 3836
5 months ago
415360d9e8
rust: format ntp files
...
Ticket: 3836
5 months ago
fa864f9c2f
rust: format mime files
...
Ticket: 3836
5 months ago
2cfcaec1b0
rust: format ldap files
...
Ticket: 3836
5 months ago
64e7c671cc
rust: format ftp files
...
Ticket: 3836
5 months ago
f217e249cb
rust: format ffi files
...
Ticket: 3836
5 months ago
f7c14809f4
rust: format enip files
...
Ticket: 3836
5 months ago
e526eb8e2b
rust: format bittorrent_dht files
...
Ticket: 3836
5 months ago
f5ac0e201c
rust: format asn1 files
...
Ticket: 3836
5 months ago
1ced97bdbb
rust: format applayertemplate files
...
Ticket: 3836
5 months ago
57f76a2462
github-ci: update Fedora builds to Fedora 44
5 months ago
95b7f2b998
scan-build: support taint filtering
...
Support scan-build's taint filtering logic. Adds a yaml config to mark
a dedicated debug validation function as filtering a taint.
Use to suppress warnings in reference, threshold and classification file
handling.
Ticket: #3153 .
5 months ago
fbaaa9dcae
github-actions: update scan-build to clang-22
...
Run it on Ubuntu 26.04.
Update enabled checkers.
Ticket: #3153 .
5 months ago
7b0afb3bbd
github-ci: add FreeBSD build test
...
Expand the Github-CI build coverage by adding another OS that
Suricata targets.
Ticket: 8487
5 months ago
aa4946547b
github-ci: check formatting and clippy on example rust plugin
6 months ago
5bbe99188b
ci: update rust version to 1.95
6 months ago
891b17277e
ci: check dist rules
...
So that we catch if we add a typo like
app-layer-event:snmp.version_mismatchZZZ;
6 months ago
98979dbfe9
github-actions: bump actions/github-script from 8.0.0 to 9.0.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](ed597411d8...3a2844b7e9
6 months ago
00b5c2f579
github-actions: bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v7...v7.0.1 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
5dcdcf0de2
github-actions: bump github/codeql-action from 4.35.1 to 4.35.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.1 to 4.35.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.35.1...v4.35.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
cdb02a2779
rust/dns: rustfmt
6 months ago
adc0f18463
doc/ci: check keyword links
...
Ticket: 8257
6 months ago
f5bf76c0ee
examples/plugins/rust: add a rust example plugin
...
Only demonstrates EVE callbacks for now, but I plan to turn this into a
show case of a variety of callbacks a Rust plugin can do as we add Rust
bindings to the ffi crate.
6 months ago
42a85c37f1
scripts: add script to check rules in doc
...
Ticket: 8372
and run it in github CI
6 months ago
be36e67f52
rust: suppress cargo audit for RUSTSEC-2026-0097
...
Per https://rustsec.org/advisories/RUSTSEC-2026-0097 ,
this issue it not applicable unless the "log" and "thread_rng"
features of rand are enabled. "log" is not enabled in our
dependency chain.
Updating to the fixed version of rand requires an MSRV of 1.85.
Ticket: #8467
7 months ago
a11aaadd86
plugins: add --plugin command line option to load plugins
...
Add --plugin <PATH> to load an additional plugin from the command
line. This is more convenient than "--set plugins.X" especially when
you may already have a plugins loaded and you want to load an
additional one.
Ticket: 8463
7 months ago
ecffd6cd54
github-ci: deny warnings in clippy check
...
We currently have some clippy warnings in the ffi crate. They output to
to the terminal but clippy exits with a success code. Typically we want
to fix this, so deny warnings which will cause clippy to exit with an
error code, failing ci.
7 months ago
70994426d3
github-ci: add --workspace to cargo clippy --fix
...
--fix doesn't appear to apply to all sub-crates unless --workspace is
provided.
7 months ago
bf6824cb49
github-actions: bump codecov/codecov-action from 5.5.2 to 6.0.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.5.2 to 6.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](671740ac38...57e3a136b7
7 months ago
b9fac32bbd
github-actions: bump github/codeql-action from 4.32.4 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.4 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.4...v4.35.1 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
5ff0ed977c
github-actions: bump actions/download-artifact from 8.0.0 to 8.0.1
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](70fc10c6e5...3e5f45b2cf
7 months ago
49b1382a8b
qa: add nfq based firewall test with live reload
7 months ago
1c66eec656
qa: add script to test firewall bridge mode
7 months ago
6f0bb39aaa
workflows: add qa-simulation mode
...
As build flag to (some of the) checks that run suricata-verify:
- AlmaLinux 10 (schema, plugins)
- CentOS Stream 9
- Fedora 43 (Suricata Verify codecov)
- Fedora 43 (clang, debug, asan, wshadow, rust-strict, systemd)
- Fedora 43 (gcc, debug, flto, asan, wshadow, rust-strict)
- Fedora (non-root, debug, clang, asan, wshadow, rust-strict, no-ja)
- Ubuntu 22.04 (Debug Validation)
- Debian 12 (xdp)
- Debian 13 (xdp)
- Debian 12 MSRV
- PF_RING
Related to
Ticket #7885
7 months ago
17cd814911
workflows: fix minor typo
7 months ago
bc4a055e73
github-ci: remove coveralls
...
Seems less reliable than codecov, so remove again.
7 months ago
9cab99fbd3
rust: rust fmt derive crate
7 months ago
468a13e052
log-cf-common: let mktime determine proper tz
...
In some timezones, LogCustomFormatTest01 was failing as we were
specifying the wrong setting for is_dst. Instead set it to -1 so mktime
can make the decision based on the environment. Appears to fix this test
for "Brazil/East" in the summer.
Add GitHub CI tests to test this specific test with a few different
timezones.
7 months ago
551f6ded69
github-ci: update almalinux minimal build to use dist archive
...
Update the AlmaLinux recommended minimal build to use the pre built
distribution archive as this is the type of build the documentation is
targetting.
7 months ago
87dba92bdd
github-ci: update debian/ubuntu minimal build to use dist
...
Update the Ubuntu/Debian minimal recommended build to use the
pre-built dist archive instead of building from git, as that is the
type of build this documentation targets.
Also use the ubuntu:22.04 container. The GitHub provided Ubuntu 22.04
VM appears to contain some new additions like a newer Rust that is not
found on a typical Ubuntu 22.04 installation.
7 months ago
46d666cdde
github-ci: enable debug for ndpi, pfring and netmap builds
7 months ago
2658a366ad
qa: move live tests into qa/live dir
...
They are not github specific.
8 months ago
f711e57e8e
examples/lib/live: a lib example with live capture
...
Simple libpcap example for live capture. Allows listening on multiple
interfaces to show how multiple threads (workers) can be used.
Ticket: #8096
8 months ago
02e4399059
github-ci: add debug validation to almalinux 10 build
...
After the distcheck, this build doesn't need unittests, so add
debug-validation, as this can trigger assertions in our lib examples
that are tested in this job
This triggers a debug-validation error in the custom library example.
Ticket: #8259
8 months ago
3068089762
github-ci: disable libmagic on macos
...
5.47 is currently breaking CI, so disable during investigation.
Related to ticket #8342 .
8 months ago
03f767a094
github-ci: re-enable rpm jobs
8 months ago
33ddbc3244
github-ci: use --skip-branches in coverage consistently
...
Completes 02f6340972
8 months ago
8df4e10018
github-actions: bump actions/download-artifact from 7.0.0 to 8.0.0
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 7.0.0 to 8.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](37930b1c2a...70fc10c6e5
8 months ago
202d1e26c3
github-actions: bump github/codeql-action from 4.32.3 to 4.32.4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.3 to 4.32.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.3...v4.32.4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
8 months ago
cfde322f06
github-actions: bump actions/upload-artifact from 6.0.0 to 7.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
8 months ago
d4434ef4e8
dpdk: add live run test suite
...
Add live tests to verify that mempool, mempool cache sizes, and
potentially other DPDK features are initialized correctly during the
startup.
Follows up on bugs found in mempool settings on real/bonded devices.
The tests are placed in the new folder qa/live/ after a comment
in https://github.com/OISF/suricata/pull/14896 which indicated other
live tests are going to be moved there as well.
Ticket: 8320
8 months ago
02f6340972
github-ci: update cov builds
...
Use --skip-branches to avoid countless partial coverage in unittests.
Update from 22.04 to 24.04 and llvm 15 to 19 to support --skip-branches.
8 months ago
ccd1df99fd
github-ci: add coveralls coverage uploads
8 months ago
accaf68615
github-ci: fix cov-ut profile file collision
8 months ago
65e87949c8
github-ci: ignore /github from coverage output
8 months ago
8c99759dfe
github-ci: ignore /usr and /rustc in coverage
8 months ago
d3b6bae140
github-ci: upload lcov coverage artifacts
8 months ago
e991375b04
github-ci: for codecov netns check, account for cargo build dir
...
It's not in /root/ like with container based builds.
8 months ago
e6513b5117
codecov: upload lcov reports to codecov
...
Seems to fix our issues with codecov.io.
8 months ago
fe5c2250e1
github-actions: bump github/codeql-action from 4.32.0 to 4.32.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.0 to 4.32.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.0...v4.32.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
8 months ago
eab5931074
github-ci: merge rust.yml into existing builds.yml build
...
The Rust build in rust.yml was just an AlmaLinux 9 build with some extra
checks. Instead, use an existing AlmaLinux 9 build in builds.yml, make
it use Rustup (there are other AlmaLinux 9 builds that use the RPM), and
add the checks.
Saves us one build in CI.
8 months ago
2c51744ccc
rust/ffi: stub out a rust ffi crate
...
This crate is for Rust wrappers around the -sys crate which includes
only raw bindings. This is the place to add nice wrappers around those
bindings, however it should remain clear of dependencies on the main
Suricata core crates.
Ticket: #7666
9 months ago
571681bc29
github-ci: add namespace bond tests with multiple nets
9 months ago
a8cad83403
github-ci: add namespace af-packet bond test
9 months ago
11b2860f23
rust/cargo: ignore RUSTSEC-2026-0009 for time crate
...
cargo audit reports this security issue with the time crate but Suricata
remains unaffected as no influenced fn is used by Suricata.
Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0009
The MSRV for newer time crate versions are higher than the MSRV for
Suricata right now: 1.75.0
Hence, the best course of action is to suppress this warning.
Ticket: 8269
9 months ago
c1d6958940
github-ci: relax block check
9 months ago
0a86b0f79d
github-ci: remove too verbose namespace test output
9 months ago
f3e3795f48
github-ci: relax namespace shutdown error checks
...
Caddy would sometimes return an error during shutdown. Add a warning if
this happens, but don't fail the job.
9 months ago
3a9682fd48
github-actions: bump actions/checkout from 6.0.1 to 6.0.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
c533ec0a1d
github-actions: bump github/codeql-action from 4.31.6 to 4.32.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.6 to 4.32.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.31.6...v4.32.0 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
49783fa9f7
github-ci: add namespace based IPS tests
...
Implementing a bridge test with af-packet IPS and a routing test
with iptables + nfqueue.
Very helpful explanation and guidance on network namespaces can be
found here: https://www.redhat.com/en/blog/net-namespaces
Sets up 3 network namespaces:
1. client - for running client tools like ping, curl, wget
2. server - for running a server, currently only Caddy
3. dut - for running Suricata, this namespace connects the client and
server namespaces
Validate IPS operations in 3 ways:
1. check return codes of the client tools
2. check Suricata's IPS stats
3. use tshark to validate expected drops
Run Suricata in AF_PACKET IPS mode for both autofp and workers mode. Do
the same for NFQUEUE.
Tshark's JSON output is used with JQ to validate that pings are dropped.
All tests are codecov enabled.
9 months ago
b944e3b1ed
ci: update rust version to 1.93
9 months ago
a0c91aa9f0
github-actions: bump actions/upload-artifact from 5.0.0 to 6.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
10 months ago
2deb1d25c4
github-actions: bump actions/cache from 4 to 5
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
10 months ago
03ee55c99f
github-actions: bump actions/checkout from 6.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6...v6.0.1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
10 months ago
Jason Ish
Victor Julien
dependabot[bot]
Philippe Antoine
Lukas Sismis
Juliana Fajardini
Shivani Bhardwaj