mirror of
https://github.com/armbian/build
synced 2025-09-24 19:47:06 +07:00
GH Actions: Kernel hardening analysis: Exclude RISC-V configs
RISC-V is not yet supported by kernel-hardening-checker. See https://github.com/a13xp0p0v/kernel-hardening-checker/issues/56
This commit is contained in:
@@ -44,9 +44,11 @@ jobs:
|
||||
path: kconfig-hardened-check
|
||||
|
||||
- name: Check kernel config for security issues
|
||||
# Run kernel-hardening-checker for each kernel config file excluding RISC-V configs, since they are not supported yet.
|
||||
# See https://github.com/a13xp0p0v/kernel-hardening-checker/issues/56
|
||||
run: |
|
||||
for file in ${{ steps.changed-files.outputs.all_changed_files }}; do
|
||||
if [[ "${file}" = config/kernel/*.config ]]; then
|
||||
if [[ "${file}" = config/kernel/*.config && ! $(head -n 10 "${file}" | grep -q "riscv") ]]; then
|
||||
kconfig-hardened-check/bin/kernel-hardening-checker -m show_fail -c $file | sed -e 's/^/ /' >> $GITHUB_STEP_SUMMARY
|
||||
fi
|
||||
done
|
||||
|
||||
Reference in New Issue
Block a user