diff --git a/.github/workflows/kernel-security-analysis-pr.yml b/.github/workflows/kernel-security-analysis-pr.yml index a968b36bc..572d6db1c 100644 --- a/.github/workflows/kernel-security-analysis-pr.yml +++ b/.github/workflows/kernel-security-analysis-pr.yml @@ -44,9 +44,11 @@ jobs: path: kconfig-hardened-check - name: Check kernel config for security issues + # Run kernel-hardening-checker for each kernel config file excluding RISC-V configs, since they are not supported yet. + # See https://github.com/a13xp0p0v/kernel-hardening-checker/issues/56 run: | for file in ${{ steps.changed-files.outputs.all_changed_files }}; do - if [[ "${file}" = config/kernel/*.config ]]; then + if [[ "${file}" = config/kernel/*.config && ! $(head -n 10 "${file}" | grep -q "riscv") ]]; then kconfig-hardened-check/bin/kernel-hardening-checker -m show_fail -c $file | sed -e 's/^/ /' >> $GITHUB_STEP_SUMMARY fi done