diff options
| author | Owen Avery <powerboat9.gamer@gmail.com> | 2024-04-25 13:08:14 -0400 |
|---|---|---|
| committer | P-E-P <32375388+P-E-P@users.noreply.github.com> | 2024-10-10 10:11:54 +0000 |
| commit | 1a030d34cd79900be410de5fc95b18d3109a79cd (patch) | |
| tree | 95bc42e40813002e8223d29ee6b24cd0e885c010 | |
| parent | bad1ebacd138b6a8bfa072a3f29c256108404277 (diff) | |
| download | gcc-1a030d34cd79900be410de5fc95b18d3109a79cd.zip gcc-1a030d34cd79900be410de5fc95b18d3109a79cd.tar.gz gcc-1a030d34cd79900be410de5fc95b18d3109a79cd.tar.bz2 | |
Check for writes outside of the build directory
ChangeLog:
* .github/workflows/ccpp.yml: Make files outside the build
directory read-only.
Signed-off-by: Owen Avery <powerboat9.gamer@gmail.com>
| -rw-r--r-- | .github/workflows/ccpp.yml | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/.github/workflows/ccpp.yml b/.github/workflows/ccpp.yml index 571d031..5485763 100644 --- a/.github/workflows/ccpp.yml +++ b/.github/workflows/ccpp.yml @@ -44,6 +44,9 @@ jobs: # install Rust directly using rustup curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0; + - name: Make Source Read-Only + run: chmod -R a-w ./* + - name: Configure run: | mkdir -p gccrs-build; @@ -125,6 +128,9 @@ jobs: # install Rust directly using rustup curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0; + - name: Make Source Read-Only + run: chmod -R a-w ./* + - name: Configure run: | mkdir -p gccrs-build; @@ -207,6 +213,9 @@ jobs: # install Rust directly using rustup curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0; + - name: Make Source Read-Only + run: chmod -R a-w ./* + - name: Configure run: | mkdir -p gccrs-build; @@ -290,6 +299,9 @@ jobs: # install Rust directly using rustup curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0; + - name: Make Source Read-Only + run: chmod -R a-w ./* + - name: Configure run: | mkdir -p gccrs-build; @@ -349,6 +361,9 @@ jobs: # install Rust directly using rustup curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0; + - name: Make Source Read-Only + run: chmod -R a-w ./* + - name: Configure run: | mkdir -p gccrs-build; @@ -418,6 +433,9 @@ jobs: # install Rust directly using rustup curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0; + - name: Make Source Read-Only + run: chmod -R a-w ./* + - name: Configure run: | mkdir -p gccrs-build; |