Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

actions: add step for checking miral and miroil symbols map #3336

Merged
merged 12 commits into from
Apr 19, 2024

Conversation

mattkae
Copy link
Contributor

@mattkae mattkae commented Apr 18, 2024

No description provided.

@mattkae mattkae requested a review from a team as a code owner April 18, 2024 18:43
@mattkae mattkae force-pushed the feature/symbol_generator_ci branch from cb3e542 to 57e1a4e Compare April 18, 2024 18:48
@mattkae mattkae force-pushed the feature/symbol_generator_ci branch from fc2ff06 to 3223157 Compare April 18, 2024 18:54
@mattkae mattkae changed the title actions: add step for checking miral symbols map actions: add step for checking miral and miroil symbols map Apr 18, 2024
@mattkae mattkae requested review from Saviq and RAOF April 18, 2024 19:02
Copy link

codecov bot commented Apr 18, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 77.35%. Comparing base (3e0a5e6) to head (7bd3170).

❗ Current head 7bd3170 differs from pull request most recent head f0062ba. Consider uploading reports for the commit f0062ba to get more accurate results

Additional details and impacted files
@@                      Coverage Diff                      @@
##           feature/symbols_generator    #3336      +/-   ##
=============================================================
+ Coverage                      77.34%   77.35%   +0.01%     
=============================================================
  Files                           1062     1072      +10     
  Lines                          67817    68216     +399     
=============================================================
+ Hits                           52453    52769     +316     
- Misses                         15364    15447      +83     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@mattkae mattkae force-pushed the feature/symbol_generator_ci branch from 8808130 to 4d3eba4 Compare April 18, 2024 19:37
Copy link
Contributor

@RAOF RAOF left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Approving, but not merging, to give the security question a little more airing.

Comment on lines 34 to 38
- name: Install clang
run: |
wget https://apt.llvm.org/llvm.sh
chmod +x llvm.sh
sudo ./llvm.sh 19
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

FWIW, this appears to work correctly with clang-19 from 24.04 (once that becomes available in GH, I guess)


- name: Install clang
run: |
wget https://apt.llvm.org/llvm.sh
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hm. What are the security concerns with this curl | sudo sh -?

It's in the GitHub runners infrastructure, so infrastructure escape shouldn't be a problem, but what does it have access to here?

I think the answer is that it's got access to the GitHub secrets? Which means it has access to the release signing key, and the signing key to upload to the PPA?

I don't think this should be a blocker here, but maybe we should record this somewhere?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We changed this to at least add it from the repository

@mattkae mattkae force-pushed the feature/symbol_generator_ci branch 10 times, most recently from 5d2e82f to 6ba8032 Compare April 19, 2024 14:40
@mattkae mattkae force-pushed the feature/symbol_generator_ci branch from 6ba8032 to 0ab1bdb Compare April 19, 2024 14:42
Copy link
Collaborator

@Saviq Saviq left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some nits inline

tools/symbols_map_generator/main.py Outdated Show resolved Hide resolved
.github/workflows/symbols-check.yml Outdated Show resolved Hide resolved
.github/workflows/symbols-check.yml Outdated Show resolved Hide resolved
.github/workflows/symbols-check.yml Outdated Show resolved Hide resolved
@mattkae mattkae requested a review from Saviq April 19, 2024 15:05

- name: Install dependencies
run: |
sudo apt-get build-dep ./
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the expensive step :)

Suggested change
sudo apt-get build-dep ./

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I want the build deps so that 3rd party libraries resolve in clang, right?

.github/workflows/symbols-check.yml Show resolved Hide resolved
@mattkae mattkae requested a review from Saviq April 19, 2024 15:31
Copy link
Collaborator

@Saviq Saviq left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure.

@Saviq Saviq merged commit 5a7d34f into feature/symbols_generator Apr 19, 2024
19 of 24 checks passed
@Saviq Saviq deleted the feature/symbol_generator_ci branch April 19, 2024 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants