commit | dd076d0d87cfeff800f2dcf0c59122bcf61f1b7b | [log] [tgz] |
---|---|---|
author | Oliver Newman <olivernewman@google.com> | Tue Aug 29 20:40:02 2023 +0000 |
committer | CQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com> | Tue Aug 29 20:40:02 2023 +0000 |
tree | df2a63b71b6fede1edeed099db2aefe970b60187 | |
parent | 54b9a1242385c1cde3ce742b32527ab83f5b2a31 [diff] |
[engine] Use O_CLOEXEC when writing nsjail This should solve the issue with nsjail file descriptors leaking into forked subprocesses during tests and causing "text file busy" errors when the nsjail executable gets run. Change-Id: I293a5d31479fd6ca4d203a872cb80cb881e0a80d Reviewed-on: https://fuchsia-review.googlesource.com/c/shac-project/shac/+/909332 Fuchsia-Auto-Submit: Oliver Newman <olivernewman@google.com> Reviewed-by: Marc-Antoine Ruel <maruel@google.com> Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
Shac (Scalable Hermetic Analysis and Checks) is a unified and ergonomic tool and framework for writing and running static analysis checks.
Shac checks are written in Starlark.
go install go.fuchsia.dev/shac-project/shac@latest shac check shac doc shac.star | less
Planned features/changes, in descending order by priority:
shac.textproto
shac.star
files.shac
cache directory that checks can write toctx.scm
glob
arguments to ctx.scm.{all,affected}_files()
functions for easier filtering⚠ The source of truth is at https://fuchsia.googlesource.com/shac-project/shac.git and uses Gerrit for code review.
See CONTRIBUTING.md to submit changes.