Skip to content

Additional Warning/Hardening Test in CI#3568

Open
Easton97-Jens wants to merge 2 commits into
owasp-modsecurity:v3/masterfrom
Easton97-Jens:v3/master-workflows
Open

Additional Warning/Hardening Test in CI#3568
Easton97-Jens wants to merge 2 commits into
owasp-modsecurity:v3/masterfrom
Easton97-Jens:v3/master-workflows

Conversation

@Easton97-Jens
Copy link
Copy Markdown
Contributor

  • I added a separate CI workflow/build job for ModSecurity v3 to make compiler warnings and hardening-related issues visible earlier in the development process.
  • The job intentionally builds ModSecurity with stricter GCC warning flags such as -Wall, -Wextra, -Wformat, and -Wformat-security.
  • The run currently operates in a warn-only mode so existing warnings become visible in CI without immediately failing the entire workflow because of -Werror.
  • This helps detect potential issues and regressions early and allows them to be fixed proactively before they appear in Fedora/RHEL packaging or downstream builds.
  • In addition, all relevant compiler, linker, and configure flags are printed in the CI logs to improve transparency and reproducibility of the build environment.
  • The long-term goal is to continuously reduce warnings and hardening issues and eventually re-enable stricter error handling (-Werror).

#3567

@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant