CI/CD Pipeline #2

New issue

Open

opened 2026-08-06 00:27:59 +00:00 by juniper · 0 comments

juniper commented

2026-08-06 00:27:59 +00:00

Owner

Use Forgejo runners to write a robust, parallelized, secure CI/CD pipeline that:

Runs full soundness proofs on the C code
Generates fuzz tests using OpenSSL as the golden reference
Generates tests from Wycheproof and CCTV
Compiles library code, tests, stack use harnesses, and proof harnesses for each supported platform
Runs constant-time and secret-erasure proofs on the finished binary for each supported platform
Runs test vectors in qemu-user for each supported platform, ensuring they all pass
Runs stack use harnesses in qemu-user for each supported platform, documenting the maximum stack usage
Creates release tarballs for me to sign
Upon me signing them, logs the signature to a transparency log and puts the release tarballs on a publicly-accessible file server (likely Copyparty)

Use Forgejo runners to write a robust, parallelized, secure CI/CD pipeline that: - Runs full soundness proofs on the C code - Generates fuzz tests using OpenSSL as the golden reference - Generates tests from [Wycheproof](https://github.com/C2SP/wycheproof) and [CCTV](https://github.com/C2SP/CCTV) - Compiles library code, tests, stack use harnesses, and proof harnesses for each supported platform - Runs constant-time and secret-erasure proofs on the finished binary for each supported platform - Runs test vectors in `qemu-user` for each supported platform, ensuring they all pass - Runs stack use harnesses in `qemu-user` for each supported platform, documenting the maximum stack usage - Creates release tarballs for me to sign - Upon me signing them, logs the signature to a transparency log and puts the release tarballs on a publicly-accessible file server (likely Copyparty)

juniper added the

Kind/Feature

Priority

Critical

labels

2026-08-06 00:27:59 +00:00

juniper self-assigned this

2026-08-06 00:27:59 +00:00

juniper added this to the 1.0.0 Stable Release project

2026-08-06 00:27:59 +00:00