travis-ci / apt-package-safelist

Safelist of apt packages approved for build environments with restricted sudo
MIT License
109 stars 86 forks source link

APT whitelist request for chicken-bin #975

Open dbohdan opened 9 years ago

travisbot commented 9 years ago

_This is an automated comment._

Ran tests and found setuid bits by purely textual search. Further analysis is required.

If these are found to be benign, examine http://github.com/travis-ci/apt-package-whitelist/tree/test-apt-package-whitelist-975 and its PR.

Packages found: chicken-bin libchicken7 libchicken-dev

See https://travis-ci.org/travis-ci/apt-whitelist-checker/builds/77005580 for details.

alvaromorales commented 8 years ago

Any updates on this?

alvaromorales commented 7 years ago

Any updates? (cc @BanzaiMan)

michaelsilver commented 7 years ago

👍

Seconded, adding the ability to install CHICKEN Scheme using apt-get on Travis would be really nice. Right now, we have to install from source on every build, which not only slows the build, but probably puts more strain on the Travis servers than apt-get would.

wasamasa commented 7 years ago

While the CHICKEN project does have a CI system for all known eggs, it isn't nearly as flexible as Travis. I support any efforts at making the latter option more convenient.

edit: The PR has a false positive on the posix unit and its documentation offering a setuid/seteuid/setgid API call. There are no actual setuid/setgid binaries involved.

travisbot commented 6 years ago

This is an automated comment.

Ran tests and found setuid bits by purely textual search. Further analysis is required.

If these are found to be benign, examine http://github.com/travis-ci/apt-package-whitelist/compare/test-apt-package-whitelist-975 and its PR.

Packages found: chicken-bin libchicken6 libchicken-dev

See https://travis-ci.org/travis-ci/apt-whitelist-checker/builds/440491669 for details.