Add the ldd-check test pipeline to a bunch of packages

apk-tools.yaml

@@ -79,6 +79,9 @@ test:
         wget https://raw.githubusercontent.com/chainguard-dev/apko/71f1961fde53a10c5bd40b80dd4c00a9250dd9f7/pkg/apk/apk/testdata/rsa256-signed/APKINDEX.tar.gz -O packages/aarch64/APKINDEX.tar.gz
         apk --arch aarch64 --repository ./packages/ info --all alpine-baselayout
         apk --version
+    - uses: test/ldd-check
+      with:
+        files: /lib/libapk.so.2.14.0
 
 update:
   enabled: false

btrfs-progs.yaml

@@ -111,3 +111,12 @@ test:
 
         # Show filesystem info
         btrfs inspect-internal dump-super test.img
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libbtrfs.so.0
+          /usr/lib/libbtrfs.so.0.1
+          /usr/lib/libbtrfs.so.0.1.4
+          /usr/lib/libbtrfsutil.so.1
+          /usr/lib/libbtrfsutil.so.1.3
+          /usr/lib/libbtrfsutil.so.1.3.2

cyrus-sasl.yaml

@@ -112,3 +112,41 @@ test:
         saslpasswd2 --version
         saslauthd --help
         sasldblistusers2 help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libsasl2.so.3
+          /usr/lib/libsasl2.so.3.0.0
+          /usr/lib/sasl2/libanonymous.so
+          /usr/lib/sasl2/libanonymous.so.3
+          /usr/lib/sasl2/libanonymous.so.3.0.0
+          /usr/lib/sasl2/libcrammd5.so
+          /usr/lib/sasl2/libcrammd5.so.3
+          /usr/lib/sasl2/libcrammd5.so.3.0.0
+          /usr/lib/sasl2/libdigestmd5.so
+          /usr/lib/sasl2/libdigestmd5.so.3
+          /usr/lib/sasl2/libdigestmd5.so.3.0.0
+          /usr/lib/sasl2/libgs2.so
+          /usr/lib/sasl2/libgs2.so.3
+          /usr/lib/sasl2/libgs2.so.3.0.0
+          /usr/lib/sasl2/libgssapiv2.so
+          /usr/lib/sasl2/libgssapiv2.so.3
+          /usr/lib/sasl2/libgssapiv2.so.3.0.0
+          /usr/lib/sasl2/liblogin.so
+          /usr/lib/sasl2/liblogin.so.3
+          /usr/lib/sasl2/liblogin.so.3.0.0
+          /usr/lib/sasl2/libntlm.so
+          /usr/lib/sasl2/libntlm.so.3
+          /usr/lib/sasl2/libntlm.so.3.0.0
+          /usr/lib/sasl2/libplain.so
+          /usr/lib/sasl2/libplain.so.3
+          /usr/lib/sasl2/libplain.so.3.0.0
+          /usr/lib/sasl2/libsasldb.so
+          /usr/lib/sasl2/libsasldb.so.3
+          /usr/lib/sasl2/libsasldb.so.3.0.0
+          /usr/lib/sasl2/libscram.so
+          /usr/lib/sasl2/libscram.so.3
+          /usr/lib/sasl2/libscram.so.3.0.0
+          /usr/lib/sasl2/libsql.so
+          /usr/lib/sasl2/libsql.so.3
+          /usr/lib/sasl2/libsql.so.3.0.0

gcc.yaml

@@ -350,6 +350,39 @@ test:
     - uses: test/compiler-hardening-check
       with:
         cc: gcc
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcc1plugin.so
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcc1plugin.so.0
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcc1plugin.so.0.0.0
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcp1plugin.so
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcp1plugin.so.0
+          /usr/lib/gcc/x86_64-pc-linux-gnu/14/plugin/libcp1plugin.so.0.0.0
+          /usr/lib/libasan.so
+          /usr/lib/libasan.so.8
+          /usr/lib/libasan.so.8.0.0
+          /usr/lib/libatomic.so
+          /usr/lib/libcc1.so
+          /usr/lib/libcc1.so.0
+          /usr/lib/libcc1.so.0.0.0
+          /usr/lib/libgomp.so
+          /usr/lib/libhwasan.so
+          /usr/lib/libhwasan.so.0
+          /usr/lib/libhwasan.so.0.0.0
+          /usr/lib/libitm.so
+          /usr/lib/libitm.so.1
+          /usr/lib/libitm.so.1.0.0
+          /usr/lib/liblsan.so
+          /usr/lib/liblsan.so.0
+          /usr/lib/liblsan.so.0.0.0
+          /usr/lib/libquadmath.so
+          /usr/lib/libtsan.so
+          /usr/lib/libtsan.so.2
+          /usr/lib/libtsan.so.2.0.0
+          /usr/lib/libubsan.so
+          /usr/lib/libubsan.so.1
+          /usr/lib/libubsan.so.1.0.0
 
 update:
   enabled: true

gdbm.yaml

@@ -58,3 +58,8 @@ test:
         gdbm_dump --help
         gdbm_load --help
         gdbmtool --help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libgdbm.so.6
+          /usr/lib/libgdbm.so.6.0.0

glibc.yaml

@@ -614,6 +614,26 @@ test:
         ldconfig --help
         ld.so --version
         ld.so --help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /lib/libBrokenLocale.so.1
+          /lib/libanl.so.1
+          /lib/libc.so.6
+          /lib/libc_malloc_debug.so.0
+          /lib/libdl.so.2
+          /lib/libm.so.6
+          /lib/libmvec.so.1
+          /lib/libnsl.so.1
+          /lib/libnss_compat.so.2
+          /lib/libnss_dns.so.2
+          /lib/libnss_files.so.2
+          /lib/libpthread.so.0
+          /lib/libresolv.so.2
+          /lib/librt.so.1
+          /lib/libthread_db.so.1
+          /lib/libutil.so.1
+          /usr/bin/ld.so
 
 update:
   enabled: true

gmp.yaml

@@ -54,3 +54,13 @@ update:
   enabled: true
   release-monitor:
     identifier: 1186
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libgmp.so.10
+          /usr/lib/libgmp.so.10.5.0
+          /usr/lib/libgmpxx.so.4
+          /usr/lib/libgmpxx.so.4.7.0

inih.yaml

@@ -62,3 +62,11 @@ update:
     strip-prefix: r
     use-tag: true
     tag-filter: r
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libINIReader.so.0
+          /usr/lib/libinih.so.0

iptables.yaml

@@ -178,3 +178,14 @@ test:
         iptables-nft-restore --help
         iptables-restore --help
         iptables-translate --help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libip4tc.so.2
+          /usr/lib/libip4tc.so.2.0.0
+          /usr/lib/libip6tc.so.2
+          /usr/lib/libip6tc.so.2.0.0
+          /usr/lib/libipq.so.0
+          /usr/lib/libipq.so.0.0.0
+          /usr/lib/libxtables.so.12
+          /usr/lib/libxtables.so.12.7.0

isl.yaml

@@ -60,3 +60,11 @@ update:
   manual: true # originally skipped, let's be careful upgrading this package
   release-monitor:
     identifier: 13286
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libisl.so.23
+          /usr/lib/libisl.so.23.4.0

jq.yaml

@@ -76,3 +76,8 @@ test:
     - name: Using jq to transform JSON structure
       runs: |
         echo '[{"id":1,"name":"John"},{"id":2,"name":"Jane"}]' | jq '{users: map({userId: .id, userName: .name})}' | grep -E '"userId": 1|"userId": 2' || exit 1
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libjq.so.1
+          /usr/lib/libjq.so.1.0.4

libcap.yaml

@@ -79,3 +79,13 @@ update:
   enabled: true
   release-monitor:
     identifier: 1569
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libcap.so.2
+          /usr/lib/libcap.so.2.71
+          /usr/lib/libpsx.so.2
+          /usr/lib/libpsx.so.2.71

libevent.yaml

@@ -70,3 +70,19 @@ update:
     identifier: libevent/libevent
     strip-prefix: release-
     strip-suffix: -stable
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libevent-2.1.so.7
+          /usr/lib/libevent-2.1.so.7.0.1
+          /usr/lib/libevent_core-2.1.so.7
+          /usr/lib/libevent_core-2.1.so.7.0.1
+          /usr/lib/libevent_extra-2.1.so.7
+          /usr/lib/libevent_extra-2.1.so.7.0.1
+          /usr/lib/libevent_openssl-2.1.so.7
+          /usr/lib/libevent_openssl-2.1.so.7.0.1
+          /usr/lib/libevent_pthreads-2.1.so.7
+          /usr/lib/libevent_pthreads-2.1.so.7.0.1

libffi.yaml

@@ -72,3 +72,12 @@ update:
   github:
     identifier: libffi/libffi
     strip-prefix: v
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib64/libffi.so
+          /usr/lib64/libffi.so.8
+          /usr/lib64/libffi.so.8.1.4

libgcrypt.yaml

@@ -81,3 +81,8 @@ test:
         hmac256 --help
         mpicalc --version
         mpicalc --help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libgcrypt.so.20
+          /usr/lib/libgcrypt.so.20.5.0

libgpg-error.yaml

@@ -78,3 +78,8 @@ test:
         yat2m --version
         gpg-error --help
         yat2m --help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libgpg-error.so.0
+          /usr/lib/libgpg-error.so.0.38.0

libidn2.yaml

@@ -75,3 +75,11 @@ update:
   enabled: true
   release-monitor:
     identifier: 5597
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libidn2.so.0
+          /usr/lib/libidn2.so.0.4.0

libmnl.yaml

@@ -61,3 +61,11 @@ update:
   enabled: true
   release-monitor:
     identifier: 1663
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libmnl.so.0
+          /usr/lib/libmnl.so.0.2.0

libnftnl.yaml

@@ -78,3 +78,8 @@ test:
 
         # Run the application
         ./test
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libnftnl.so.11
+          /usr/lib/libnftnl.so.11.6.0

libpipeline.yaml

@@ -51,3 +51,11 @@ update:
   enabled: true
   release-monitor:
     identifier: 1704
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libpipeline.so.1
+          /usr/lib/libpipeline.so.1.5.8

libpsl.yaml

@@ -85,3 +85,11 @@ update:
     - "^debian.*"
   github:
     identifier: rockdaboot/libpsl
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libpsl.so.5
+          /usr/lib/libpsl.so.5.3.5

libseccomp.yaml

@@ -70,3 +70,8 @@ test:
     - runs: |
         scmp_sys_resolver version
         scmp_sys_resolver help
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libseccomp.so.2
+          /usr/lib/libseccomp.so.2.5.5

libtirpc.yaml

@@ -91,3 +91,11 @@ update:
   enabled: true
   release-monitor:
     identifier: 1740
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libtirpc.so.3
+          /usr/lib/libtirpc.so.3.0.0

libunistring.yaml

@@ -66,3 +66,11 @@ update:
   enabled: true
   release-monitor:
     identifier: 1747
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libunistring.so.5
+          /usr/lib/libunistring.so.5.2.0

libuv.yaml

@@ -81,3 +81,8 @@ test:
 
         gcc test_libuv.c -o test_libuv -luv || (echo "libuv test compilation failed!" && exit 1)
         ./test_libuv || (echo "libuv test failed!" && exit 1)
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libuv.so.1
+          /usr/lib/libuv.so.1.0.0

libxcrypt.yaml

@@ -84,3 +84,11 @@ update:
     identifier: besser82/libxcrypt
     strip-prefix: v
     use-tag: true
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libcrypt.so.1
+          /usr/lib/libcrypt.so.1.1.0

libxml2.yaml

@@ -144,3 +144,11 @@ update:
   enabled: true
   release-monitor:
     identifier: 1783
+
+test:
+  pipeline:
+    - uses: test/ldd-check
+      with:
+        files: |-
+          /usr/lib/libxml2.so.2
+          /usr/lib/libxml2.so.2.13.5