bunnie
2e0c7c2722
fix CI to run on dev branch as well as main
2026-02-18 21:22:47 +08:00
Sylvain Bellemare
63b5c92b5c
Refactor dockerfiles and ci docker.yml
2026-01-29 02:49:19 +09:00
Sylvain Bellemare
0959ea80db
Improve security of dockerfiles
...
* Verify checksum of downloaded rust target riscv32imac-unknown-xous_*.zip
* Pin base image to a sha256 digest
* Quote build arg to prevent shell injection attacks
* Run cargo --locked to make sure builds follow Cargo.lock
* Use --proto '=https' for curl to only allow HTTPS protocol to prevent downgrade attacks
* Create non-root user to run cargo commands and build artifacts
2026-01-16 16:41:43 +09:00
Sylvain Bellemare
f5bd5e2982
Add ci to build dabao firmware with docker
2026-01-14 15:03:03 +07:00
bunnie
122707cd15
extend CI coverage to include pull requests targeting main
2025-11-17 17:37:10 +08:00
bunnie
f3ff944c63
add bao1x targets for gh ci
2025-11-17 17:33:23 +08:00
bunnie
d1a925c224
modify format CI flow to generate template files prior to checks
2024-01-15 01:53:02 +08:00
bunnie
d14e1b2608
another try...
...
maybe i'm reading the gh automation error message wrong?
2024-01-11 21:56:52 +08:00
bunnie
62a351f813
maybe this is the trick? ugh.
2024-01-11 21:52:36 +08:00
bunnie
86afec0160
fix origin statement
...
sorry this is all pushing to GH directly, the only way i know
how to test this is to push to the branch :P so y'all get
to see me flail.
2024-01-11 21:51:11 +08:00
bunnie
6405f91fd7
have to fetch main before we can checkout the rustfmt.toml
2024-01-11 21:49:46 +08:00
bunnie
5f0e2a48b0
cleanup missing -P specifier on grep regex
...
looks like the regex is perl syntax
2024-01-11 21:44:11 +08:00
bunnie
ca5845c2f6
checkout the main rustfmt.toml prior to running CI
...
this is necessary so that patches can't sneak through by
modifying rustfmt.toml to bypass a CI checke.
2024-01-11 21:24:14 +08:00
bunnie
da60e82584
add a proposed trailing whitespace check
2024-01-11 21:20:41 +08:00
bunnie
99a238107b
add a proposed rustfmt check
2024-01-11 21:20:26 +08:00
bunnie
d510a806de
cleanup build.yml action
...
I think we don't need to run the full rust toolchain script,
just `rustup update`?
Also update actions version for checkout and comments.
2024-01-11 21:19:41 +08:00
bunnie
d38d53e0d9
turns out you have to specify a toolchain
...
i guess we'll just let it fail when we have a breaking rust
toolchain issue? idk.
2024-01-08 16:31:30 +08:00
bunnie
3a108bb902
see if we can fix github actions by not specifying an explicit toolchain
...
we want to be building against the latest, at least for now...
2024-01-08 16:02:42 +08:00
bunnie
b5e15fd7cc
update workflow to target latest toolchain
2023-07-16 18:05:53 +08:00
bunnie
539b8723f1
need --no-verify on the toolchain installation as well
2023-07-04 10:46:43 +08:00
bunnie
c89e198e91
uhh...why did that --no-verify change not save. oh well, try again.
2023-07-04 10:43:26 +08:00
bunnie
3bd163034e
attempt to fix gh workflow
2023-07-04 10:40:23 +08:00
bunnie
d86fd9dfc9
bump minimum toolchain requirement
2022-08-05 16:28:42 +08:00
Sean Cross
c85925ef87
gh actions: fetch tags
...
The build system now requires tags, so fetch those
2022-07-13 20:27:03 +08:00
bunnie
290188f36b
try to fix the gh automation
2022-03-28 15:49:22 +08:00
Gianguido Sorà
ae2762e7f5
fix: on non-TTY terminals if forced, proceed with toolchain download and install
...
This is a corner case in Github CI.
2022-03-18 17:17:34 +01:00
Gianguido Sorà
d9f5fd0c6a
use force on install toolkit
2022-03-18 16:47:12 +01:00
Gianguido Sorà
cbd412a461
compile for hosted and real hardware on main push
2022-03-18 15:51:58 +01:00
