23898641638
85%
master: 84%

Ran 02 Apr 2026 12:13PM UTC

Jobs 1

Files 630

Run time 1min

Badge

Embed ▾

Committed 02 Apr 2026 11:41AM UTC coverage: 84.318% (-0.02%) from 84.338%

Build # 23898641638

Build Type

push

github

Committed by

Ravenwater

Commit Message

fix(docker): multi-stage build and security hardening

- Multi-stage build: compile tools in builder stage, copy only headers,
  cmake config, and binaries to runtime image (removes build artifacts)
- Add apt-get upgrade to pick up all available security patches
- Remove git and gdb from runtime image (not needed for user code)
- Add ucalc to installed tools (UNIVERSAL_BUILD_TOOLS_UCALC=ON)
- Copy cmake package config for find_package(UNIVERSAL) support
- Fix include path in usage comment (-I not needed, /usr/local/include
  is already on the default search path)
- Add apt-get upgrade to devcontainer Dockerfile

Note: linux-libc-dev kernel CVEs (692 of 709 total) are inherent to
any Ubuntu-based development image and not exploitable in containers.
The host kernel is what actually runs. Docker Scout flags them against
the kernel source version the headers were built from.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Coverage Stats

44620 of 52919 relevant lines covered (84.32%)

6023954.29 hits per line

Coverage Regressions

Lines	Coverage	∆	File
10	31.43	-3.57%	include/sw/universal/verification/test_suite_randoms.hpp
3	80.58	-0.67%	include/sw/universal/number/posit1/specialized/posit_16_1.hpp

Jobs

ID	Job ID	Ran	Files	Coverage
1	23898641638.1	02 Apr 2026 12:12PM UTC	630	84.32	GitHub Action Run

stillwater-sc / universal / 23898641638
85%
master: 84%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 23898641638

stillwater-sc / universal / 23898641638 85% master: 84%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 23898641638

stillwater-sc / universal / 23898641638
85%
master: 84%

README BADGES
x