oasis-core-ci

//web/atward: 1 advisories for Cargo.lock
- idna 0.4.0: RUSTSEC-2024-0421 (CVE-2024-12224), patched: >=1.0.0
//web/converse: 16 advisories for Cargo.lock
- brotli-sys 0.3.2: RUSTSEC-2021-0131 (CVE-2020-8927), no unaffected version available
- comrak 0.2.14: RUSTSEC-2021-0026 (CVE-2021-27671, GHSA-xmr7-v725-2jjr), patched: >=0.9.1
- comrak 0.2.14: RUSTSEC-2021-0063 (CVE-2021-38186, GHSA-6wj2-g87r-pm62), patched: >=0.10.1
- diesel 1.4.8: RUSTSEC-2024-0365, patched: >=2.2.3
- h2 0.1.26: RUSTSEC-2024-0003 (GHSA-8r5v-vm4m-4g25), patched: ^0.3.24; >=0.4.2
- h2 0.1.26: RUSTSEC-2023-0034 (CVE-2023-26964, GHSA-f8vr-r385-rh5r), patched: >=0.3.17
- h2 0.1.26: RUSTSEC-2024-0332 (GHSA-q6cp-qfwq-4gcv), patched: ^0.3.26; >=0.4.4
- hyper 0.11.27: RUSTSEC-2021-0078 (CVE-2021-32715, GHSA-f3pg-qwvg-p99c), patched: >=0.14.10
- hyper 0.11.27: RUSTSEC-2021-0079 (CVE-2021-32714, GHSA-5h46-h7hh-c6x9), patched: >=0.14.10
- hyper 0.11.27: RUSTSEC-2020-0008 (CVE-2020-35863, GHSA-h3qr-rq2j-74w4), patched: >=0.12.34
- idna 0.1.5: RUSTSEC-2024-0421 (CVE-2024-12224), patched: >=1.0.0
- idna 0.3.0: RUSTSEC-2024-0421 (CVE-2024-12224), patched: >=1.0.0
- owning_ref 0.4.1: RUSTSEC-2022-0040 (GHSA-9qxh-258v-666c), no unaffected version available
- remove_dir_all 0.5.3: RUSTSEC-2023-0018 (GHSA-mc8h-8q98-g5hr), patched: >=0.8.0
- time 0.1.45: RUSTSEC-2020-0071 (CVE-2020-26235, GHSA-wcg3-cvx6-7396), patched: >=0.2.23
- tokio 0.1.22: RUSTSEC-2021-0124 (CVE-2021-45710, GHSA-fg7r-2g4j-5cgr), patched: >=1.8.4, <1.9.0; >=1.13.1
//web/planet-mars: 2 advisories for Cargo.lock
- openssl 0.10.68: RUSTSEC-2025-0004 (GHSA-rpmj-rpgj-qmpm), patched: >=0.10.70
- ring 0.17.8: RUSTSEC-2025-0009, patched: >=0.17.12
//corp/rih/backend: 4 advisories for Cargo.lock
- idna 0.5.0: RUSTSEC-2024-0421 (CVE-2024-12224), patched: >=1.0.0
- ring 0.16.20: RUSTSEC-2025-0009, patched: >=0.17.12
- ring 0.17.8: RUSTSEC-2025-0009, patched: >=0.17.12
- rustls 0.20.9: RUSTSEC-2024-0336 (CVE-2024-32650, GHSA-6g7w-8wpp-frhj), patched: >=0.23.5; >=0.22.4, <0.23.0; >=0.21.11, <0.22.0
//users/edef/crunch-v2: 5 advisories for Cargo.lock
- fast-float 0.2.0: RUSTSEC-2025-0003, no unaffected version available
- hashbrown 0.15.0: RUSTSEC-2024-0402, patched: >=0.15.1
- ring 0.16.20: RUSTSEC-2025-0009, patched: >=0.17.12
- ring 0.17.8: RUSTSEC-2025-0009, patched: >=0.17.12
- rustls 0.20.9: RUSTSEC-2024-0336 (CVE-2024-32650, GHSA-6g7w-8wpp-frhj), patched: >=0.23.5; >=0.22.4, <0.23.0; >=0.21.11, <0.22.0
//users/edef/narinfo2parquet: 1 advisories for Cargo.lock
- fast-float 0.2.0: RUSTSEC-2025-0003, no unaffected version available
//users/edef/turbofetch: 4 advisories for Cargo.lock
- hashbrown 0.15.0: RUSTSEC-2024-0402, patched: >=0.15.1
- ring 0.16.20: RUSTSEC-2025-0009, patched: >=0.17.12
- ring 0.17.8: RUSTSEC-2025-0009, patched: >=0.17.12
- rustls 0.20.9: RUSTSEC-2024-0336 (CVE-2024-32650, GHSA-6g7w-8wpp-frhj), patched: >=0.23.5; >=0.22.4, <0.23.0; >=0.21.11, <0.22.0
//users/edef/fetchroots: 6 advisories for Cargo.lock
- curve25519-dalek 4.1.2: RUSTSEC-2024-0344, patched: >=4.1.3
- fast-float 0.2.0: RUSTSEC-2025-0003, no unaffected version available
- h2 0.3.24: RUSTSEC-2024-0332 (GHSA-q6cp-qfwq-4gcv), patched: ^0.3.26; >=0.4.4
- idna 0.5.0: RUSTSEC-2024-0421 (CVE-2024-12224), patched: >=1.0.0
- ring 0.17.8: RUSTSEC-2025-0009, patched: >=0.17.12
- rustls 0.21.10: RUSTSEC-2024-0336 (CVE-2024-32650, GHSA-6g7w-8wpp-frhj), patched: >=0.23.5; >=0.22.4, <0.23.0; >=0.21.11, <0.22.0
//users/edef/weave: 2 advisories for Cargo.lock
- fast-float 0.2.0: RUSTSEC-2025-0003, no unaffected version available
- hashbrown 0.15.0: RUSTSEC-2024-0402, patched: >=0.15.1
//users/aspen/xanthous/server: 3 advisories for Cargo.lock
- mio 0.8.4: RUSTSEC-2024-0019 (CVE-2024-27308, GHSA-r8w9-5wcg-vfj7), patched: >=0.8.11
- remove_dir_all 0.5.3: RUSTSEC-2023-0018 (GHSA-mc8h-8q98-g5hr), patched: >=0.8.0
- tokio 1.21.2: RUSTSEC-2023-0001 (CVE-2023-22466, GHSA-7rrj-xr53-82p7), patched: >=1.18.4, <1.19.0; >=1.20.3, <1.21.0; >=1.23.1
//users/aspen/achilles: 2 advisories for Cargo.lock
- regex 1.4.6: RUSTSEC-2022-0013 (CVE-2022-24713, GHSA-m5pq-gvj9-9vr8), patched: >=1.5.5
- remove_dir_all 0.5.3: RUSTSEC-2023-0018 (GHSA-mc8h-8q98-g5hr), patched: >=0.8.0
//users/tazjin/yddns: 5 advisories for Cargo.lock
- h2 0.3.21: RUSTSEC-2024-0003 (GHSA-8r5v-vm4m-4g25), patched: ^0.3.24; >=0.4.2
- h2 0.3.21: RUSTSEC-2024-0332 (GHSA-q6cp-qfwq-4gcv), patched: ^0.3.26; >=0.4.4
- mio 0.8.9: RUSTSEC-2024-0019 (CVE-2024-27308, GHSA-r8w9-5wcg-vfj7), patched: >=0.8.11
- ring 0.17.5: RUSTSEC-2025-0009, patched: >=0.17.12
- rustls 0.21.8: RUSTSEC-2024-0336 (CVE-2024-32650, GHSA-6g7w-8wpp-frhj), patched: >=0.23.5; >=0.22.4, <0.23.0; >=0.21.11, <0.22.0
//users/tazjin/tgsa: 4 advisories for Cargo.lock
- idna 0.5.0: RUSTSEC-2024-0421 (CVE-2024-12224), patched: >=1.0.0
- openssl 0.10.64: RUSTSEC-2025-0004 (GHSA-rpmj-rpgj-qmpm), patched: >=0.10.70
- openssl 0.10.64: RUSTSEC-2024-0357, patched: >=0.10.66
- ring 0.16.20: RUSTSEC-2025-0009, patched: >=0.17.12
//users/tazjin/finito: 4 advisories for Cargo.lock
- chrono 0.4.11: RUSTSEC-2020-0159, patched: >=0.4.20
- generic-array 0.9.0: RUSTSEC-2020-0146 (CVE-2020-36465, GHSA-3358-4f7f-p4j4), patched: >=0.8.4, <0.9.0; >=0.9.1, <0.10.0; >=0.10.1, <0.11.0; >=0.11.2, <0.12.0; >=0.12.4, <0.13.0; >=0.13.3
- smallvec 1.4.0: RUSTSEC-2021-0003 (CVE-2021-25900, GHSA-43w2-9j62-hq99), patched: >=0.6.14, <1.0.0; >=1.6.1
- time 0.1.43: RUSTSEC-2020-0071 (CVE-2020-26235, GHSA-wcg3-cvx6-7396), patched: >=0.2.23
//net/alcoholic_jwt: 2 advisories for Cargo.lock
- openssl 0.10.59: RUSTSEC-2025-0004 (GHSA-rpmj-rpgj-qmpm), patched: >=0.10.70
- openssl 0.10.59: RUSTSEC-2024-0357, patched: >=0.10.66
//fun/paroxysm: 2 advisories for Cargo.lock
- diesel 1.4.8: RUSTSEC-2024-0365, patched: >=2.2.3
- tokio 0.1.22: RUSTSEC-2021-0124 (CVE-2021-45710, GHSA-fg7r-2g4j-5cgr), patched: >=1.8.4, <1.9.0; >=1.13.1
//tools/cheddar: 1 advisories for Cargo.lock
- idna 0.5.0: RUSTSEC-2024-0421 (CVE-2024-12224), patched: >=1.0.0
//tvix: 1 advisories for Cargo.lock
- ring 0.17.8: RUSTSEC-2025-0009, patched: >=0.17.12
//ops/yandex-cloud-rs: 6 advisories for Cargo.lock
- h2 0.3.19: RUSTSEC-2024-0003 (GHSA-8r5v-vm4m-4g25), patched: ^0.3.24; >=0.4.2
- h2 0.3.19: RUSTSEC-2024-0332 (GHSA-q6cp-qfwq-4gcv), patched: ^0.3.26; >=0.4.4
- mio 0.8.8: RUSTSEC-2024-0019 (CVE-2024-27308, GHSA-r8w9-5wcg-vfj7), patched: >=0.8.11
- ring 0.16.20: RUSTSEC-2025-0009, patched: >=0.17.12
- rustls 0.21.1: RUSTSEC-2024-0336 (CVE-2024-32650, GHSA-6g7w-8wpp-frhj), patched: >=0.23.5; >=0.22.4, <0.23.0; >=0.21.11, <0.22.0
- rustls-webpki 0.100.1: RUSTSEC-2023-0053 (GHSA-fh2r-99q2-6mmg), patched: >=0.100.2, <0.101.0; >=0.101.4
//ops/journaldriver: 1 advisories for Cargo.lock
- openssl 0.10.66: RUSTSEC-2025-0004 (GHSA-rpmj-rpgj-qmpm), patched: >=0.10.70

Upload.buildkite/pipeline.sh

Ran in 8s

Lint Go.buildkite/go/lint.sh

Ran in 43s

Audit Rust dependencies for vulnerabilities.buildkite/rust/cargo_audit.sh

Ran in 9s

Audit Go dependencies for vulnerabilities.buildkite/go/nancy_audit.sh

Ran in 16s

Build Go.buildkite/go/build.sh && .buildkite/go/upload_artifacts.sh

Ran in 5m 44s

Test Go build for non-Linux platformsGOOS=windows make -C go && GOOS=darwin make -C go

Ran in 1m 17s

Build Rust runtime loader.buildkite/rust/build_generic.sh /workdir -p oasis-core-runtime-loader && cd /var/tmp/artifacts/default/release && buildkite-agent artifact upload oasis-core-runtime-loader

Ran in 22s

Build runtimes.buildkite/rust/build_runtime.sh tests/runtimes/simple-keymanager && .buildkite/rust/build_runtime.sh tests/runtimes/simple-keyvalue && .buildkite/rust/build_runtime.sh tests/runtimes/simple-rofl && cd /var/tmp/artifacts/sgx/x86_64-fortanix-unknown-sgx/release && buildkite-agent artifact upload simple-keymanager.sgxs && buildkite-agent artifact upload simple-keyvalue.sgxs && buildkite-agent artifact upload simple-keyvalue-upgrade.sgxs && buildkite-agent artifact upload simple-keymanager-upgrade.sgxs && buildkite-agent artifact upload simple-rofl.sgxs && cd /var/tmp/artifacts/default/release && buildkite-agent artifact upload simple-keymanager && buildkite-agent artifact upload simple-keyvalue && buildkite-agent artifact upload simple-keyvalue-upgrade && buildkite-agent artifact upload simple-keymanager-upgrade && buildkite-agent artifact upload simple-rofl && cd /workdir && .buildkite/rust/build_runtime.sh tests/runtimes/simple-keymanager mocksgx && .buildkite/rust/build_runtime.sh tests/runtimes/simple-keyvalue mocksgx && cd /var/tmp/artifacts/default/release && mv simple-keymanager simple-keymanager.mocksgx && mv simple-keyvalue simple-keyvalue.mocksgx && buildkite-agent artifact upload simple-keymanager.mocksgx && buildkite-agent artifact upload simple-keyvalue.mocksgx

Ran in 8m 23s

Test Rust cratesmake build-helpers && export OASIS_STORAGE_PROTOCOL_SERVER_BINARY=$(realpath go/storage/mkvs/interop/mkvs-test-helpers) && .buildkite/rust/test_generic.sh .

Ran in 7m 20s

Test Go nodetrap 'buildkite-agent artifact upload "coverage-*.txt;/tmp/oasis-node-test_*/test-node.log"' EXIT && .buildkite/go/test_and_coverage.sh

Ran in 10m 10s

1/7

E2E tests - sgx1 (basic)trap 'buildkite-agent artifact upload "coverage-merged-e2e-*.txt;/tmp/e2e/**/*.log;/tmp/e2e/**/genesis.json;/tmp/e2e/**/runtime_genesis.json"' EXIT && .buildkite/scripts/download_e2e_test_artifacts.sh && cargo install --locked --path tools && export CFLAGS_x86_64_fortanix_unknown_sgx="-isystem/usr/include/x86_64-linux-gnu -mlvi-hardening -mllvm -x86-experimental-lvi-inline-asm-hardening" && export CC_x86_64_fortanix_unknown_sgx=clang-11 && .buildkite/scripts/test_e2e.sh --timeout 20m --scenario e2e/runtime/runtime-encryption --scenario e2e/runtime/rofl --scenario e2e/runtime/trust-root/.+ --scenario e2e/runtime/keymanager-.+

Ran in 20m 12s

2/7

Ran in 13m 46s

3/7

Ran in 12m 34s

4/7

Ran in 15m 18s

5/7

Ran in 8m 47s

6/7

Ran in 8m 38s

7/7

Ran in 12m 57s

1/30

E2E teststrap 'buildkite-agent artifact upload "coverage-merged-e2e-*.txt;/tmp/e2e/**/*.log;/tmp/e2e/**/genesis.json;/tmp/e2e/**/runtime_genesis.json"' EXIT && .buildkite/scripts/download_e2e_test_artifacts.sh && .buildkite/scripts/test_e2e.sh --timeout 20m

Ran in 7m 41s

2/30

Ran in 6m 53s

3/30

Ran in 7m 28s

4/30

Ran in 9m 59s

5/30

Ran in 7m 56s

6/30

Ran in 11m 24s

7/30

Ran in 7m 47s

8/30

Ran in 3m 9s

9/30

Ran in 6m 42s

10/30

Ran in 10m 28s

11/30

Ran in 14m 11s

12/30

Ran in 11m 51s

13/30

Ran in 7m 37s

14/30

Ran in 12m 22s

15/30

Ran in 8m 38s

16/30

Ran in 5m 28s

17/30

Ran in 8m 35s

18/30

Ran in 6m 25s

19/30

Ran in 7m 11s

20/30

Ran in 6m 49s

21/30

Ran in 9m 24s

22/30

Ran in 9m 11s

23/30

Ran in 6m 42s

24/30

Ran in 6m 7s

25/30

Ran in 5m 10s

26/30

Ran in 9m 41s

27/30

Ran in 13m 55s

28/30

Ran in 6m 9s

29/30

Ran in 4m 49s

30/30

Ran in 8m 50s

E2E tests (txsource-multi-short)trap 'buildkite-agent artifact upload "coverage-merged-e2e-*.txt;/tmp/e2e/**/*.log;/tmp/e2e/**/genesis.json;/tmp/e2e/**/runtime_genesis.json"' EXIT && .buildkite/scripts/download_e2e_test_artifacts.sh && .buildkite/scripts/test_e2e.sh --timeout 20m --scenario e2e/runtime/txsource-multi-short

Ran in 7m 37s

E2E tests (mock SGX)trap 'buildkite-agent artifact upload "coverage-merged-e2e-*.txt;/tmp/e2e/**/*.log;/tmp/e2e/**/genesis.json;/tmp/e2e/**/runtime_genesis.json"' EXIT && .buildkite/scripts/download_e2e_test_artifacts_mocksgx.sh && .buildkite/scripts/test_e2e.sh --timeout 20m --scenario e2e/runtime/runtime-encryption

Ran in 2m 26s

Coverage Rust cratesmake build-helpers && export OASIS_STORAGE_PROTOCOL_SERVER_BINARY=$(realpath go/storage/mkvs/interop/mkvs-test-helpers) && .buildkite/rust/coverage.sh

Ran in 4m 20s

Merge and upload coverage.buildkite/scripts/merge_coverage.sh && .buildkite/scripts/upload_coverage.sh

Ran in 21s

E2E upgrade tests - sgx1trap 'buildkite-agent artifact upload "/tmp/oasis-{post,pre}-upgrade/e2e/**/*.log;/tmp/oasis-{post,pre}-upgrade/e2e/**/genesis.json;/tmp/oasis-{post,pre}-upgrade/e2e/**/runtime_genesis.json"' EXIT && .buildkite/scripts/download_e2e_test_artifacts.sh && .buildkite/scripts/test_upgrade.sh

Total Job Run Time: 6h 30m