randombit / botan

90%

master: 90%

LAST BUILD ON BRANCH jack/zizmor

branch: jack/zizmor

CHANGE BRANCH

x

Reset

• jack/zizmor
• 3.1.1_cpp17
• 3.2.0_cpp17
• Algo_Registry_windows_cs
• Deprecated_WIN_API
• RdRand_windows
• V2
• X509_Time-constructor
• add-alloc-constructor
• add-clang-format-17-attributes
• add-contributor-credits
• add-external-tls12-master-secret-calculation
• add-gcov-support
• add-ignores
• add-null-ciphers
• add-pkcs8-cmd
• aes-gcm-testdata
• amalgamation-includes
• android
• apple
• appveyor-vs2015
• argon2-simd64
• args
• arm64
• arm64_rng
• avoid-char-concatination
• avoid-static-nonamalgamation
• avoid-zero-define
• b64_pop_back
• bakefile
• base_vector
• bcc32-fixes
• bigint-array-serialization
• bigint-docs
• blake2b
• blake2s-perf
• bounds-check2
• bounds-check4
• bounds-check5
• bounds-fixes
• build-python
• c-function-must-not-throw
• cc-flag-sanity
• cert-ext-opt-issuer
• choices
• chore/clang-tidy-file
• chore/cpp20_warnings
• chore/install_tpm2_only_when_needed
• chore/update_and_fix_jitterentropy
• chore/update_ndk
• ci/amalgamation
• ci/build_what_we_need
• ci/ccache_for_adhoc_dependencies
• ci/ccache_tweaks
• ci/check
• ci/emscripten_update
• ci/tls-anvil
• circleci
• clang-analyzer
• clang-cl
• clang-cpuid
• clang-debug-solink
• clang_dbg
• cleanup
• cleanup-dead-links
• cli-argument-count-fix
• cmake
• cmce/rej-sampling-limit
• cmd-cli
• cmd-endl
• codecov
• command-virtual-dtor
• compress-empty-buffer
• compression-overrides
• const-time-monty
• copyright_show_dependencies
• coverity-badge
• cppCheck-static-analysis-tests
• cppcheck-explicit
• cppcheck-fixes
• cppcheck-part2
• cppcheck_warning_message_in_tests
• cpuid-arm64-dep
• credits
• ct-tls-cbc-padding
• ctgrind
• darwin_secrandom
• darwin_secrandom_returnvalue
• deactivate-failing-iterations-test
• debug-coverity-config
• dlies-compile-fixes
• doc/update-boringssl-test-link
• docfixes
• dylib-path
• ec-group-ffi
• ec_oid
• ec_oid_1_10
• emcc-build-flags
• emscripten-tests
• enable-wpedantic
• endl2
• esdm-rng
• expanded-ml-kem
• experimental/kmac-amalg-fix
• extended-key-usage-pkcs10-fix
• extra-semicolon
• extra-seminolon
• feature
• feature-android-NDK-and-XCode-TODO-messages
• feature-broken-links
• feature-cleanup-asio-code
• feature-handling-some-todo-messages
• feature-replace-TLS1.2-raw-pointers-with-unique-ptr
• feature/ascon_aead128
• feature/ascon_hash256
• feature/byte_wise_gcm
• feature/constexpr_hex_decode
• feature/crl_version
• feature/devcontainer
• feature/extend_certstore_in_memory
• feature/ffi_count_for_dn
• feature/ffi_count_functions
• feature/ffi_crl_validity
• feature/ffi_issuer_subject_alt_name_and_name_constraints
• feature/ffi_list_crl_entries
• feature/ffi_query_cert_constraints
• feature/ffi_serial_as_mp_t
• feature/fips_ctx_and_prehash
• feature/flexible_sp800_kdf
• feature/gcc-strubbing
• feature/generic_ffi_getters
• feature/kdf_output
• feature/load_compressed_ecc_key
• feature/module_wildcards
• feature/multiple_ocsp_responders
• feature/pkcs11v32
• feature/span_in_mode_padding
• feature/update_bsi_policy
• feature/xof_in_ffi
• feature/xof_in_python
• fix-boost-187
• fix-coverage.in-indentation
• fix-credentials
• fix-gentoo-package-link
• fix-iterate-by-const-reference
• fix-keyusage-decode
• fix-module-dependencies
• fix-msvc-debug-1
• fix-msvc-warnings
• fix-multiple-abi-link-flags
• fix-remaining-wshadow-warnings
• fix-static-lib-registration
• fix-test
• fix/assertion_in_signature
• fix/bitvector_to_bytes
• fix/clang_tidy_tmpl_magic
• fix/cmake-config-package
• fix/cmake_target_name
• fix/cmake_with_version_suffix
• fix/configure_paths
• fix/dn_ctor_confusion
• fix/doc_bsi_tls
• fix/dont_alias_for_old_cmake
• fix/ffi_cert_is_ca
• fix/ffi_srp6
• fix/fwd_decl_signer
• fix/heap_corruption_in_msvc
• fix/lshift_empty_bigint
• fix/minimal_modern_build
• fix/missing_compliance_check
• fix/msvc-warnings
• fix/msvc_x86_build
• fix/ninja_on_macos
• fix/no_avx2
• fix/ocsp_with_multiple_certs
• fix/overriding_ephemeral_ecdh_keys_in_tls12
• fix/pk_sign_with_bytes
• fix/reassign_frodo_tls_code_points
• fix/shlint
• fix/test_assumption_of_potential_side_effect
• fix/test_without_emsa_pssr
• fix/tpm2_crypto_backend_for_tss_410
• fix/tpm2_module_loading
• fix/tpm2_test_std_ignore
• fix/tpm2_uses_legacy_ec_point
• fix/typo
• fix/unreachable_warning
• fix/utf8_in_release_script
• fix/x509_nc_prefix
• fix/zeroize_pcurves_private_key
• fix_algo_registry_locking_windows
• fix_cmake
• fix_crash_in_comp_filter
• fixme/tmp2-explicit-conversions
• fixme/tmp2-explicit-convertion-in-tpm2-context
• force-semicolons
• fs
• fstream
• fuzzer
• fuzzer-test-const-variable-reference-solve
• fuzzer_test
• gen-amalgamation-doesnt-build-via-amalgamation
• get-cores
• getopt
• hmac-veryverylong
• ignore-pyc
• improve-rfc3779-api
• include-fixes
• intermediate-trust-anchors
• jack/aarch64-ci
• jack/abstract-time
• jack/accidentally-quad-re
• jack/add-back-disable-neon
• jack/add-booth-w5-mul
• jack/add-dns-name-check-test
• jack/add-macos-26-ci
• jack/add-ml-dsa-4x4-verify-tests
• jack/add-native-aarch64-ci
• jack/add-p521-leading-zero-keygen
• jack/add-pcurves-gen-script
• jack/add-ruff-ci
• jack/add-sm4-aead-tests
• jack/add-volatile-word8-add2
• jack/aes-test-fix
• jack/affine-batch-use-ct-choice
• jack/affine-point-table
• jack/always-inline-bit-ops
• jack/asn1-optional-types
• jack/asn1-time-from-epoch-seconds
• jack/assume-ssse3
• jack/auxval-cleanup
• jack/avoid-clang-19-constexpr-issue
• jack/avoid-gcc-11-miscompile
• jack/avoid-k4-table
• jack/avoid-python-walrus
• jack/barrett-cleanup
• jack/barrett-input-check
• jack/base58-improvements
• jack/better-mod-sub
• jack/bike-shed-cmce-params
• jack/bit-ops-masking
• jack/blacklist-msvc-for-serpent-avx512
• jack/blake2b-test-vectors
• jack/blind-dsa-inversion
• jack/bn-div-neg
• jack/boost-update
• jack/both-vararg
• jack/bump-arm32-to-nightly
• jack/bump-ffi-version
• jack/camellia-gfni
• jack/choice-from-mask
• jack/ci-baremetal
• jack/ci-report-sizes
• jack/clang-18-warning
• jack/clang-tidy-19-fixes
• jack/clang-tidy-always
• jack/clang-tidy-asm-simd-warning
• jack/clang-tidy-cache
• jack/clang-tidy-cache-size-from-env
• jack/clang-tidy-config-updates
• jack/clang-tidy-cppcoreguidelines-owning-memory
• jack/clang-tidy-headers
• jack/clang-tidy-headers-in-ci
• jack/clang-tidy-headers-part-2
• jack/clang-tidy-implicit-bool-conversion
• jack/clang-tidy-includes
• jack/clang-tidy-member-fn-to-static
• jack/clang-tidy-misc-confusable-identifiers
• jack/clang-tidy-misc-redundant-expression
• jack/clang-tidy-modernize-raw-string-literal
• jack/clang-tidy-readability-implicit-bool-conversion
• jack/clang-tidy-readability-redundant-member-init
• jack/clang-tidy-readability-use-std-min-max
• jack/clang-tidy-runner-verbose
• jack/clang-tidy-script-cleanup
• jack/clang-tidy-simplify-boolean-expr
• jack/clang-tidy-suspicious-call-argument
• jack/clang-tidy-unchecked-optional-access
• jack/cleanup-arm-sha2
• jack/cleanup-build-h
• jack/cleanup-cli-timers
• jack/cleanup-ec-parse
• jack/cleanup-iso9796
• jack/cleanup-up-includes
• jack/cli-perf-keygen-fix
• jack/compare-perf-buf-size
• jack/constexpr-inv
• jack/constrain-integer-templates
• jack/coverage-build-speedups
• jack/cpu-rng-isa
• jack/cpuid-provider-string
• jack/cpuid-refactoring
• jack/cross-builds-on-arm
• jack/ct-choice-into-bitmask
• jack/ct-choice-size
• jack/deprecate-checksums
• jack/deprecate-ffi-getters
• jack/deprecate-siphash
• jack/deprecate-threaded-fork
• jack/dh-cleanups
• jack/disable-emscripten-build
• jack/div10
• jack/dl-group-depr
• jack/dl-group-from-name
• jack/dn-upper-bound
• jack/doc-threat-models
• jack/document-ec-changes
• jack/dont-slice-pk
• jack/ec-bn-cleanups
• jack/ec-disabled
• jack/ec-group-explicit-curve-decoding
• jack/ec-h2c-predicate
• jack/ec-lookup-or-create
• jack/ec-point-cleanups
• jack/ec-scalar-hash
• jack/ec-scalar-inv-vartime
• jack/ec-scalar-inverse-vt
• jack/ec-x-only-mul
• jack/ecdsa-new-blinding
• jack/ecies-cleanups
• jack/ed25519-cleanup
• jack/ed25519-constructor-fn
• jack/ed448-use-mp
• jack/emit-fpic-for-static-lib
• jack/enable-clang-tidy-misc-misplaced-const
• jack/enable-clang-tidy-readability-qualified-auto
• jack/enable-pqc
• jack/enable-tls13-fuzzer
• jack/entropy-is-optional
• jack/esdm-ci-cleanup
• jack/fake-pms-match-expected
• jack/faster-crl-ent-parsing
• jack/faster-mp-cnd-sub
• jack/faster-oid-compare
• jack/faster-p192-redc
• jack/faster-redc-setup
• jack/faster-rpki-tests
• jack/fe-assign
• jack/ffi-depr-warnings
• jack/ffi-example
• jack/ffi-misc
• jack/ffi-return-not-impl
• jack/ffi-srp6-fixed-len
• jack/ffi-thunk-save-space
• jack/ffi-tidy
• jack/fips-140-policy
• jack/fix-4096
• jack/fix-4539
• jack/fix-4730
• jack/fix-4854
• jack/fix-4855
• jack/fix-4930
• jack/fix-aarch64-without-os-utils
• jack/fix-aes-vperm-for-be
• jack/fix-bit-op-allowed-types
• jack/fix-boost-warning
• jack/fix-build-configs
• jack/fix-clang-19-warning
• jack/fix-clang-tidy-bugprone-argument-comment
• jack/fix-clang-tidy-bugprone-branch-clone
• jack/fix-clang-tidy-bugprone-lambda-function-name
• jack/fix-clang-tidy-cert-err58-cpp
• jack/fix-clang-tidy-cppcoreguidelines-avoid-do-while
• jack/fix-clang-tidy-cppcoreguidelines-init-variables
• jack/fix-clang-tidy-cppcoreguidelines-prefer-member-initializer
• jack/fix-clang-tidy-cppcoreguidelines-slicing
• jack/fix-clang-tidy-hicpp-explicit-conversions
• jack/fix-clang-tidy-hicpp-member-init
• jack/fix-clang-tidy-hicpp-vararg
• jack/fix-clang-tidy-misc-const-correctness
• jack/fix-clang-tidy-modernize-avoid-bind
• jack/fix-clang-tidy-modernize-loop-convert
• jack/fix-clang-tidy-named-parameter
• jack/fix-clang-tidy-narrowing-conversions
• jack/fix-clang-tidy-non-private
• jack/fix-clang-tidy-readability-container-data-pointer
• jack/fix-clang-tidy-readability-implicit-bool-conversion
• jack/fix-clang-tidy-readability-isolate-declaration
• jack/fix-clang-tidy-readability-qualified-auto
• jack/fix-cmce-unpoison
• jack/fix-decrypt-or-random-test
• jack/fix-ec-named
• jack/fix-ec-point-tests
• jack/fix-ffi-blocks
• jack/fix-ffi-decl
• jack/fix-ffi-header
• jack/fix-ffi-test-wo-kdf2
• jack/fix-from-wide-bytes
• jack/fix-kdf-err
• jack/fix-missing-dependencies
• jack/fix-more-clang-19-warnings
• jack/fix-more-named-parameters
• jack/fix-msvc-arm-ghash
• jack/fix-ppc-specific-clang-tidy
• jack/fix-pt-eq
• jack/fix-python-typing
• jack/fix-riscv64-cpuid
• jack/fix-rpki-test
• jack/fix-ruff-warnings
• jack/fix-simd-4x32
• jack/fix-some-clang-tidy-implicit-bool-conversion
• jack/fix-template-concat
• jack/fix-tls13-nist-pqc
• jack/fix-tpm2-amalgamation
• jack/fix-tpm2-clang-tidy
• jack/fix-tpm2-test-error
• jack/fix-typos
• jack/fix-xof-bench
• jack/force-inline-keccak-f
• jack/format-python
• jack/fpe-example
• jack/gate-avx2-on-ssse3
• jack/gate-tls-text-policy
• jack/gcm-avoid-heap
• jack/generic-scalar-inverse-vartime
• jack/ghash-cpu-for-be
• jack/ghash-skip-ks
• jack/group-init-cleanup
• jack/guard-configure-opt
• jack/header-minimization
• jack/improve-ec-docs
• jack/improve-p521-redc
• jack/improve-rsa-crt
• jack/internal-assert-and-mem-ops
• jack/internal-feat-macros
• jack/isa-extn
• jack/just-for-you-rene
• jack/keccak-avx512
• jack/keccak-avx512-part1
• jack/kuznyechik-ks
• jack/llvm-fix
• jack/loongarch64-extn
• jack/looooongarch
• jack/macos-ci-update
• jack/marvin-cli-improvements
• jack/marvin-improvements
• jack/marvin-runs-option
• jack/mgf1-span
• jack/min-clang-is-18
• jack/min-pcurves-surface
• jack/ml-dsa-verify-fixes
• jack/moar-tidy
• jack/mod-inv-distinguish-cases
• jack/modify-ec-restrictions
• jack/module-policy
• jack/monty-inner-shared-ptr
• jack/monty-not-bigint
• jack/monty-unroll
• jack/more-bigint-api-deprecations
• jack/more-build-h-cleanup
• jack/more-chacha20poly1305-tests
• jack/more-deprecations
• jack/more-ec-deprecations
• jack/move-2x-relnotes
• jack/move-amalg-to-native
• jack/move-c++20-check
• jack/move-include
• jack/move-ios-build-to-macos-26
• jack/move-os-utils
• jack/mp-bits
• jack/mp-cleanup
• jack/mp-monty-write
• jack/mp-view
• jack/mul2-setup-g
• jack/mul2-use-mixed-addition
• jack/new-cert-builder
• jack/new-jacobi
• jack/new-new-ec-key-constructors
• jack/new-pk-sign-builder
• jack/newton-for-monty-inverse
• jack/no-and-for-you
• jack/no-fe
• jack/no-man-db
• jack/no-more-emsa-wars
• jack/no-pcurves-api
• jack/no-pcurves-id
• jack/no-word4-unroll
• jack/now-with-less-emsa
• jack/oid-hash
• jack/oid-maps-space-opt
• jack/oid-static-lookup
• jack/opt-word-div
• jack/oss-fuzz-422598833
• jack/p192-fe-inv2
• jack/padding-alias
• jack/pcurves-cond-audit
• jack/pcurves-constants
• jack/pcurves-correction
• jack/pcurves-docs
• jack/pcurves-generic
• jack/pcurves-misc
• jack/pcurves-mul-improvements
• jack/pcurves-no-early-exit
• jack/pcurves-sqrt
• jack/pcurves-test-cleanup
• jack/pk-pad-dep-cleanup
• jack/pk-parsing-bench
• jack/pk-sign-builder
• jack/pkcs8-enc
• jack/poly1305
• jack/poly1305-rfc-7539-test-vectors
• jack/prefer-aes-in-tls
• jack/prep-for-curve-preregistration
• jack/pss-params
• jack/py-ci-scripts
• jack/pylint
• jack/qemu-go-faster
• jack/re-enable-emcc
• jack/re-enable-msvc
• jack/reduce-sha512-avx512-unroll
• jack/reduce-tls-header-includes
• jack/reducer-api-work
• jack/refactor-h2c-expand-message
• jack/remove-clang-tidy-nightly
• jack/remove-disable-intrin-options
• jack/remove-dlauxinfo
• jack/remove-eme
• jack/remove-endian-config
• jack/remove-gha-hack
• jack/remove-local-config
• jack/remove-m68k-nightly
• jack/remove-msvc-hack-in-aes-vperm
• jack/remove-params-param
• jack/remove-pcurve-id-all
• jack/remove-pledge
• jack/remove-tls-kyber-r3
• jack/remove-unused-monty-fn
• jack/remove-unused-pcurve-api
• jack/remove-ws-arg
• jack/reorg-ec-group-reg-tests
• jack/revert-clang-17
• jack/riscv64-cpuid
• jack/ruff
• jack/run-clang-tidy-on-master
• jack/save-an-add
• jack/save-space-in-oid-maps
• jack/sde-gcc-14
• jack/seed-2x-unroll
• jack/serpent-avx512-workaround
• jack/serpent-gcc-hack
• jack/sha1-avx2
• jack/sha1-simd
• jack/sha1-x86-cleanup
• jack/sha2-x86-cleanup
• jack/sha256-new-avx2
• jack/sha256-simd
• jack/sha512-avx2
• jack/sha512-avx512
• jack/sha512-ni
• jack/shacal2-avx512
• jack/sieve-avoid-integer-mod
• jack/simd-refactor
• jack/skip-rpki-tests-for-clang-Os
• jack/sm3-avx2-bmi2
• jack/sm3-x86
• jack/sm4-avx512-gfni
• jack/sm4-x86
• jack/solinas-mask
• jack/sort-os-feature-macros
• jack/spake2
• jack/spanify-emsa
• jack/speed-compare
• jack/split-api-and-compiler-headers
• jack/split-blinding
• jack/split-cpuid
• jack/split-cpuid-impl
• jack/split-key-prework
• jack/src-size-reductions
• jack/stay-in-monty
• jack/std-endian-in-loadstor
• jack/string-and-span
• jack/support-minimal-curves
• jack/swar-base32
• jack/switch-tls-server-fuzzer-to-ecdsa
• jack/target-info-header
• jack/test-custom-oid-registration
• jack/test-optional-eq
• jack/test-runner-report-fix
• jack/time-log
• jack/timer-units
• jack/too-much-jitter
• jack/tweak-pcurves-blinding
• jack/typos
• jack/typos-ci
• jack/universal-binary-doc
• jack/unrolled-monty-for-pcurves
• jack/update-bigint-docs
• jack/update-codeql
• jack/update-ec-fuzzers
• jack/update-limbo
• jack/update-nist-policy
• jack/update-pubkey-rst
• jack/update-rng-docs
• jack/update-threading-docs
• jack/use-gcc-14-for-ct
• jack/use-inversion-helpers
• jack/use-mixed-addition-in-tbl-setup
• jack/use-source-location
• jack/use-std-endian
• jack/use-target-arch
• jack/valgrind-runner-script
• jack/value-barrier-h
• jack/vartime-div-pow2k
• jack/vartime-div-special-case-divisors
• jack/verify-point-after-mul
• jack/version-getters
• jack/windows-boost-amalg-only
• jack/word3-helpers
• jack/xcode-16
• jack/xmd-really-is-optional
• jl-entropy
• kem-combiner-abstraction
• kill-argc-warnings
• kullo-ci-badges
• libs-to-outdir
• locking_aloc_windows
• mark-final
• mass-prefix-member-vars
• master
• mce-keygen-endian
• missing_override
• mktime
• modernize-blake2s-and-solve-todo
• modernize-ffi-visit-source-location-remove-macro
• module-not-found
• module-policy
• module-sets
• more-prefix-member-vars
• mtheil/chacha_rng_fke
• mtheil/jitter-esdm-fixes
• mtheil/python-definitions
• mtheil/rng-cli
• net.randombit.botan
• noexcept-vs2015
• none-botan-p11-keys
• noreturn
• oid-utils
• omit-trailerField
• os_utils_process_id_fix
• ounsworth-kem-combiner
• patch-1
• patch-2
• patch-3
• patch0
• path-validation-fixes
• pqc/classic_mceliece
• prefix-gmake-includes
• privkey-stateful-operations
• pvs-studio2
• pwhash-stoppable
• python-autodoc
• python-improvements
• python-types
• python-types-doc
• random_prime_speed
• rdrand_rdseed
• rdseed
• reactivate-ffi-test
• reduce-copy-for-rougtime-file-with-span
• reduce-cppcheck-warnings-in-test-files
• reduce-fix-cppcheck-utils-directory
• reduce-todo-messages-under-test
• refactor-test-style
• refactor/keccak_ascon_sponge
• refactor/keccak_padding
• refactor/modernize-blake2s-improve-performace-and-solve-clang-tidy-suppression
• refactor/modernize-shim-logging
• refactor/span-for-cipher-mode-finalization
• refactor/static_keccak_p
• reformat-source
• relnotes
• remove-compiler-workarounds-for-ndk-and-xcode-compilers
• remove-extra-semicolons
• remove-hyperlink-from-m_
• remove-python-2.6
• remove-tls-heartbeat
• remove-todos-socket-utilities
• remove-unused-variables
• rename-installdir
• rene/crl_without_nextupdate
• rene/measure_x509_parsing
• rene/oid_initl_list
• rene/oid_literal
• rene/pkcs8-enc
• rene/throw_as_improvement
• repair-debug-config
• replace-legacy-js-exceptions
• rfc-3779
• rm-libraryinitializer
• rm-outdata-from-ignore
• rng-fork-check
• robust_build_setup_windows
• rsa-pkcs1-pubkey
• rsassa-pss-unrestricted-hash
• sanity
• security-website
• set-rpath
• set-rpath-linux
• shellcheck
• show-dependencies
• sig_of_3_7_1_RSCS1
• smartcard-logon
• soname
• stict-uint32-parsing
• streebog-fix
• string-comparision
• stylistic-updates
• symlink-windows
• test-botanpy-python23
• test-make-install
• test-reporting
• test-travis-containers
• test-work
• test/arm_strubbing
• test/kat_for_tls_cbc_aead
• test/strubbing
• test_x509_path-datadir
• texinfo
• time-test
• tls-session-id-use-three-way-comparison
• tls/ml_kem
• to_u32bit-patch
• todo-check-dns-label-length-in-parsing-cpp
• todo-use-span-and-range-in-test
• todo-use-struct-bindings
• travis-arm-eabi
• travis-coverity-config
• travis-ios
• travis-osx
• undeprecate-ecies-ka-op
• unused-headers
• update-docs
• update-ios-build-instructions
• upstream/loongarch64-no-simd
• variable-name-m_core
• vestigial-else
• warning_fixes
• wasm-simd128-part-1
• wasm-simd128-part-2
• website-typos-correction
• win-algo-registry-without-mutex
• windows_entropy
• x509-crl-ffi
• x509-ffi
• x509_extensions
• x86-amalgamation
• zip

Build # 21012913021

Build Type

Pull #5237

github

Committed by web-flow

Commit Message

Merge e036dc021 into 81beaa29d

Pull Request Pull Request #5237: Address some warnings from the zizmor GHA audit tool

Run Details

102439 of 113324 relevant lines covered (90.39%)

12916279.22 hits per line