ci: Remove sudo - assume tools pre-installed on runner
Some checks failed
Lint & Security / C/C++ Static Analysis (push) Failing after 1s
Lint & Security / Security Flaw Analysis (push) Failing after 1s
Lint & Security / Secret Scanning (push) Failing after 1s
Lint & Security / Shell Script Analysis (push) Successful in 1s

This commit is contained in:
user
2026-02-05 12:07:16 +01:00
parent 5d8fbd4bf6
commit 9430832dfc

View File

@@ -16,11 +16,6 @@ jobs:
git clone --depth=1 --branch=${{ github.ref_name }} \ git clone --depth=1 --branch=${{ github.ref_name }} \
https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git . https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git .
- name: Install cppcheck
run: |
sudo apt-get update
sudo apt-get install -y cppcheck
- name: Run cppcheck - name: Run cppcheck
run: | run: |
cppcheck --enable=warning,style,performance,portability \ cppcheck --enable=warning,style,performance,portability \
@@ -40,8 +35,7 @@ jobs:
https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git . https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git .
- name: Install flawfinder - name: Install flawfinder
run: | run: pip install --user flawfinder
pip install --user flawfinder
- name: Run flawfinder - name: Run flawfinder
run: | run: |
@@ -57,15 +51,8 @@ jobs:
git clone --branch=${{ github.ref_name }} \ git clone --branch=${{ github.ref_name }} \
https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git . https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git .
- name: Install gitleaks
run: |
GITLEAKS_VERSION="8.18.4"
curl -sSL "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" \
| sudo tar -xz -C /usr/local/bin gitleaks
- name: Run gitleaks - name: Run gitleaks
run: | run: gitleaks detect --source . --verbose --redact
gitleaks detect --source . --verbose --redact
shellcheck: shellcheck:
name: Shell Script Analysis name: Shell Script Analysis
@@ -76,11 +63,6 @@ jobs:
git clone --depth=1 --branch=${{ github.ref_name }} \ git clone --depth=1 --branch=${{ github.ref_name }} \
https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git . https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git .
- name: Install shellcheck
run: |
sudo apt-get update
sudo apt-get install -y shellcheck
- name: Find and check shell scripts - name: Find and check shell scripts
run: | run: |
SCRIPTS=$(find . -name "*.sh" -type f 2>/dev/null || true) SCRIPTS=$(find . -name "*.sh" -type f 2>/dev/null || true)