Skip to content

Security hardening, input validation, memory-safety, and key zeroization fixes #36

Security hardening, input validation, memory-safety, and key zeroization fixes

Security hardening, input validation, memory-safety, and key zeroization fixes #36

Re-run triggered July 10, 2026 17:18
Status Cancelled
Total duration 30m 40s
Artifacts 58

pr-osp-select.yml

on: pull_request
bind9  /  ...  /  Resolve wolfSSL + OpenSSL refs
9s
bind9 / discover_versions / Resolve wolfSSL + OpenSSL refs
cjose  /  ...  /  Resolve wolfSSL + OpenSSL refs
8s
cjose / discover_versions / Resolve wolfSSL + OpenSSL refs
curl  /  ...  /  Resolve wolfSSL + OpenSSL refs
8s
curl / discover_versions / Resolve wolfSSL + OpenSSL refs
debian-package  /  ...  /  Resolve wolfSSL + OpenSSL refs
12s
debian-package / discover_versions / Resolve wolfSSL + OpenSSL refs
git-ssh-dr  /  ...  /  Resolve wolfSSL + OpenSSL refs
9s
git-ssh-dr / discover_versions / Resolve wolfSSL + OpenSSL refs
grpc  /  ...  /  Resolve wolfSSL + OpenSSL refs
13s
grpc / discover_versions / Resolve wolfSSL + OpenSSL refs
hostap  /  ...  /  Resolve wolfSSL + OpenSSL refs
11s
hostap / discover_versions / Resolve wolfSSL + OpenSSL refs
iperf  /  ...  /  Resolve wolfSSL + OpenSSL refs
12s
iperf / discover_versions / Resolve wolfSSL + OpenSSL refs
krb5  /  ...  /  Resolve wolfSSL + OpenSSL refs
9s
krb5 / discover_versions / Resolve wolfSSL + OpenSSL refs
libcryptsetup  /  ...  /  Resolve wolfSSL + OpenSSL refs
12s
libcryptsetup / discover_versions / Resolve wolfSSL + OpenSSL refs
libeac3  /  ...  /  Resolve wolfSSL + OpenSSL refs
9s
libeac3 / discover_versions / Resolve wolfSSL + OpenSSL refs
libfido2  /  ...  /  Resolve wolfSSL + OpenSSL refs
14s
libfido2 / discover_versions / Resolve wolfSSL + OpenSSL refs
libhashkit2  /  ...  /  Resolve wolfSSL + OpenSSL refs
9s
libhashkit2 / discover_versions / Resolve wolfSSL + OpenSSL refs
libnice  /  ...  /  Resolve wolfSSL + OpenSSL refs
14s
libnice / discover_versions / Resolve wolfSSL + OpenSSL refs
liboauth2  /  ...  /  Resolve wolfSSL + OpenSSL refs
10s
liboauth2 / discover_versions / Resolve wolfSSL + OpenSSL refs
librelp  /  ...  /  Resolve wolfSSL + OpenSSL refs
11s
librelp / discover_versions / Resolve wolfSSL + OpenSSL refs
libssh2  /  ...  /  Resolve wolfSSL + OpenSSL refs
11s
libssh2 / discover_versions / Resolve wolfSSL + OpenSSL refs
libwebsockets  /  ...  /  Resolve wolfSSL + OpenSSL refs
7s
libwebsockets / discover_versions / Resolve wolfSSL + OpenSSL refs
net-snmp  /  ...  /  Resolve wolfSSL + OpenSSL refs
8s
net-snmp / discover_versions / Resolve wolfSSL + OpenSSL refs
nginx  /  ...  /  Resolve wolfSSL + OpenSSL refs
11s
nginx / discover_versions / Resolve wolfSSL + OpenSSL refs
openldap  /  ...  /  Resolve wolfSSL + OpenSSL refs
7s
openldap / discover_versions / Resolve wolfSSL + OpenSSL refs
opensc  /  ...  /  Resolve wolfSSL + OpenSSL refs
12s
opensc / discover_versions / Resolve wolfSSL + OpenSSL refs
openssh  /  ...  /  Resolve wolfSSL + OpenSSL refs
7s
openssh / discover_versions / Resolve wolfSSL + OpenSSL refs
openvpn  /  ...  /  Resolve wolfSSL + OpenSSL refs
8s
openvpn / discover_versions / Resolve wolfSSL + OpenSSL refs
pam-pkcs11  /  ...  /  Resolve wolfSSL + OpenSSL refs
10s
pam-pkcs11 / discover_versions / Resolve wolfSSL + OpenSSL refs
perf  /  ...  /  Resolve wolfSSL + OpenSSL refs
perf / discover_versions / Resolve wolfSSL + OpenSSL refs
ppp  /  ...  /  Resolve wolfSSL + OpenSSL refs
10s
ppp / discover_versions / Resolve wolfSSL + OpenSSL refs
python3-ntp  /  ...  /  Resolve wolfSSL + OpenSSL refs
11s
python3-ntp / discover_versions / Resolve wolfSSL + OpenSSL refs
qt5network5  /  ...  /  Resolve wolfSSL + OpenSSL refs
7s
qt5network5 / discover_versions / Resolve wolfSSL + OpenSSL refs
rsync  /  ...  /  Resolve wolfSSL + OpenSSL refs
12s
rsync / discover_versions / Resolve wolfSSL + OpenSSL refs
socat  /  ...  /  Resolve wolfSSL + OpenSSL refs
9s
socat / discover_versions / Resolve wolfSSL + OpenSSL refs
sscep  /  ...  /  Resolve wolfSSL + OpenSSL refs
11s
sscep / discover_versions / Resolve wolfSSL + OpenSSL refs
stunnel  /  ...  /  Resolve wolfSSL + OpenSSL refs
8s
stunnel / discover_versions / Resolve wolfSSL + OpenSSL refs
systemd  /  ...  /  Resolve wolfSSL + OpenSSL refs
13s
systemd / discover_versions / Resolve wolfSSL + OpenSSL refs
tcpdump  /  ...  /  Resolve wolfSSL + OpenSSL refs
12s
tcpdump / discover_versions / Resolve wolfSSL + OpenSSL refs
tnftp  /  ...  /  Resolve wolfSSL + OpenSSL refs
11s
tnftp / discover_versions / Resolve wolfSSL + OpenSSL refs
tpm2-tools  /  ...  /  Resolve wolfSSL + OpenSSL refs
7s
tpm2-tools / discover_versions / Resolve wolfSSL + OpenSSL refs
x11vnc  /  ...  /  Resolve wolfSSL + OpenSSL refs
10s
x11vnc / discover_versions / Resolve wolfSSL + OpenSSL refs
xmlsec  /  ...  /  Resolve wolfSSL + OpenSSL refs
8s
xmlsec / discover_versions / Resolve wolfSSL + OpenSSL refs
libtss2  /  ...  /  Resolve wolfSSL + OpenSSL refs
7s
libtss2 / discover_versions / Resolve wolfSSL + OpenSSL refs
nginx-pqc  /  Resolve wolfSSL/OpenSSL versions
6s
nginx-pqc / Resolve wolfSSL/OpenSSL versions
openssl-version  /  ...  /  Resolve wolfSSL + OpenSSL refs
11s
openssl-version / discover_versions / Resolve wolfSSL + OpenSSL refs
static-analysis  /  cppcheck Static Analysis
24m 45s
static-analysis / cppcheck Static Analysis
static-analysis  /  clang Static Analyzer (scan-build)
8m 27s
static-analysis / clang Static Analyzer (scan-build)
static-analysis  /  Facebook Infer Static Analysis
8m 1s
static-analysis / Facebook Infer Static Analysis
Matrix: multi-compiler / build_wolfprovider
Matrix: sssd / test_sssd
Matrix: bind9 / build_wolfprovider
Matrix: cjose / build_wolfprovider
Matrix: curl / build_wolfprovider
Matrix: debian-package / build_wolfprovider
Matrix: git-ssh-dr / build_wolfprovider
Matrix: grpc / build_wolfprovider
Matrix: hostap / build_wolfprovider
Matrix: iperf / build_wolfprovider
Matrix: krb5 / build_wolfprovider
Matrix: libcryptsetup / build_wolfprovider
Matrix: libeac3 / build_wolfprovider
Matrix: libfido2 / build_wolfprovider
Matrix: libhashkit2 / build_wolfprovider
Matrix: libnice / build_wolfprovider
Matrix: liboauth2 / build_wolfprovider
Matrix: librelp / build_wolfprovider
Matrix: libssh2 / build_wolfprovider
Matrix: libwebsockets / build_wolfprovider
Matrix: net-snmp / build_wolfprovider
Matrix: nginx / build_wolfprovider
Matrix: openldap / build_wolfprovider
Matrix: opensc / build_wolfprovider
Matrix: openssh / build_wolfprovider
Matrix: openvpn / build_wolfprovider
Matrix: pam-pkcs11 / build_wolfprovider
Matrix: perf / Overhead regression (FIPS)
Matrix: perf / Overhead regression (non-FIPS)
Matrix: ppp / build_wolfprovider
Matrix: python3-ntp / build_wolfprovider
Matrix: qt5network5 / build_wolfprovider
Matrix: rsync / build_wolfprovider
Matrix: socat / build_wolfprovider
Matrix: sscep / build_wolfprovider
Matrix: stunnel / build_wolfprovider
Matrix: systemd / build_wolfprovider
Matrix: tcpdump / build_wolfprovider
Matrix: tnftp / build_wolfprovider
Matrix: tpm2-tools / build_wolfprovider
Matrix: x11vnc / build_wolfprovider
Matrix: xmlsec / build_wolfprovider
Matrix: libtss2 / test_tpm2_tss
Matrix: nginx-pqc / nginx-pqc
Matrix: openssl-version / OpenSSL Version Test
Matrix: bind9 / test_bind
Matrix: cjose / test_cjose
Matrix: curl / test_curl
Matrix: debian-package / libwolfprov-replace-default
Matrix: git-ssh-dr / git-ssh-default-replace-test
Matrix: grpc / test_grpc
Matrix: hostap / test_hostap
Matrix: iperf / test_iperf
Matrix: krb5 / test_krb5
Matrix: libcryptsetup / test_cryptsetup
Matrix: libeac3 / test_libeac3
Matrix: libfido2 / test_libfido2
Matrix: libhashkit2 / test_libhashkit2
Matrix: libnice / test_libnice
Matrix: liboauth2 / test_liboauth2
Matrix: librelp / test_librelp
Matrix: libssh2 / test_libssh2
Matrix: libwebsockets / test_libwebsockets
Matrix: net-snmp / test_net_snmp
Matrix: nginx / test_nginx
Matrix: openldap / test_openldap
Matrix: opensc / test_opensc
Matrix: openssh / test_openssh
Matrix: openvpn / test_openvpn
Matrix: pam-pkcs11 / test_pam_pkcs11
Matrix: ppp / test_ppp
Matrix: python3-ntp / test_python3-ntp
Matrix: qt5network5 / test_qtbase_network
Matrix: rsync / test_rsync
Matrix: socat / test_socat
Matrix: sscep / test_sscep
Matrix: stunnel / test_stunnel
Matrix: systemd / test_systemd
Matrix: tcpdump / test_tcpdump
Matrix: tnftp / test_tnftp
Matrix: tpm2-tools / test_tpm2_tools
Matrix: x11vnc / test_x11vnc
Matrix: xmlsec / test_xmlsec
Fit to window
Zoom out
Zoom in

Annotations

1 error and 7 warnings
PR OSP (label-selected)
Canceling since a higher priority waiting request for PR OSP (label-selected)-refs/pull/438/merge exists
perf / Overhead regression (FIPS) (5.8.2, openssl-3.6.3)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
perf / Overhead regression (non-FIPS) (openssl-3.6.3, master)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
perf / Overhead regression (non-FIPS) (openssl-3.6.3, v5.8.4-stable)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
perf / Overhead regression (non-FIPS) (openssl-3.6.3, v5.9.2-stable)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
perf / Overhead regression (non-FIPS) (master, master)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
perf / Overhead regression (non-FIPS) (master, v5.8.4-stable)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
perf / Overhead regression (non-FIPS) (master, v5.9.2-stable)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
perf-results-fips-5.8.2-openssl-3.6.3 Expired
514 Bytes
sha256:7c6950b1f166d76b0c0178f31112ca3ae6b02b3ea3412cdf78f59be376f77f0e
perf-results-nonfips-master-master Expired
496 Bytes
sha256:9654a156f6cddfab502383495f2333f4c08c29b19c47401514da607f2121f286
perf-results-nonfips-master-openssl-3.6.3 Expired
506 Bytes
sha256:29af08e9cbb6ff8c3e82c121f92ea8bfbabccfc96f1b93fc12cb2539f18ad165
perf-results-nonfips-v5.8.4-stable-master Expired
514 Bytes
sha256:7f0504d54b96cddc304c4d2218c551b2c8ef6676e5aa39e16b131287e47666a0
perf-results-nonfips-v5.8.4-stable-openssl-3.6.3 Expired
509 Bytes
sha256:06c46625f24c5e88c60fb80984754140ca755b0c92686aa4c051d9c1b3ddfbfa
perf-results-nonfips-v5.9.2-stable-master Expired
508 Bytes
sha256:47a05f3078d073eec86dd90cdf06519889f4b35dc9136f9ae6a7b7f729d43963
perf-results-nonfips-v5.9.2-stable-openssl-3.6.3 Expired
511 Bytes
sha256:a4481715d9f53d0d0c540bd3b2ad09b9ea5ada52543f05c4b203d1871eea46f2