peter/spectre-meltdown-checker
1
0 Fork 0
mirror of https://github.com/speed47/spectre-meltdown-checker.git synced 2026-11-01 20:58:26 +01:00
Code Issues Projects Releases Wiki Activity

feat(reptar): add detection and mitigation of Reptar

Browse Source
This commit is contained in:
Stéphane Lesimple committed 2024-01-09 15:38:16 +01:00
1 parent 9b7b09ada3
commit 97f4d5f2bc
3 files changed
+459 -306
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.github/workflows/check.yml
+3 -3
View File
@@ -24,7 +24,7 @@ jobs:
fi
- name: check direct execution
run: |
expected=18
expected=19
nb=$(sudo ./spectre-meltdown-checker.sh --batch json | jq '.[]|.CVE' | wc -l)
if [ "$nb" -ne "$expected" ]; then
echo "Invalid number of CVEs reported: $nb instead of $expected"
@@ -34,7 +34,7 @@ jobs:
fi
- name: check docker-compose run execution
run: |
expected=18
expected=19
docker-compose build
nb=$(docker-compose run --rm spectre-meltdown-checker --batch json | jq '.[]|.CVE' | wc -l)
if [ "$nb" -ne "$expected" ]; then
@@ -45,7 +45,7 @@ jobs:
fi
- name: check docker run execution
run: |
expected=18
expected=19
docker build -t spectre-meltdown-checker .
nb=$(docker run --rm --privileged -v /boot:/boot:ro -v /dev/cpu:/dev/cpu:ro -v /lib/modules:/lib/modules:ro spectre-meltdown-checker --batch json | jq '.[]|.CVE' | wc -l)
if [ "$nb" -ne "$expected" ]; then