mirror of
https://github.com/mandiant/capa.git
synced 2025-12-29 06:03:52 -08:00
* Sync capa rules submodule * Sync capa-testfiles submodule * Sync capa rules submodule * changelog * *: remove /x32 and /x64 flavors from number and offset features * *: remove more references to /x32 and /x64 * linter: accept instruction scope * rules: fix max operand index (4) * API: better support A/W functions * vverbose: show lib rule matches * main: accept multiple paths to rules * main: fix removal of default rules path * lint: fix rules path * changelog * capa_as_library: fix rules path is list now * main: better handle multiple rules paths * main: bail if python 3.6 or below closes #964 * ida: readme: remove python 3.6 support * capa2yara: fix rules paths * render: meta: display rule paths on separate lines closes #971 * render: verbose: add doc * verbose: make rule path multiline more concise * vverbose: don't show examples in output closes #970 * vverbose: render subscope name, like "basic block:" closes #963 * build(deps-dev): bump pytest from 7.0.1 to 7.1.1 Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.0.1 to 7.1.1. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/7.0.1...7.1.1) --- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * ci: build: update pip and setuptools * ci: build: bump pyinstall to v4.10 * Sync capa rules submodule * Dotnet mixed mode detect (#969) * feat: start dotnet detection (#955) * feat: start dotnet detection * Apply suggestions from code review Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com> * refactor: dn instead of dotnet * refactor: format branches, extractor reorg * refactor: format selection and dotnet detect * feat: get format, arch, os * refactor: log errors and exceptions * ci: also test and build for dotnet-main dev * fix: import path * fix: circular dep * fix: remove buf argument feat: get runtime meta data * fix: log unsupported runtime error * fix: type ignore Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com> * fix: imports and add tests * feat: detect mixed mode and tests * feat: start dotnet detection (#955) * feat: start dotnet detection * Apply suggestions from code review Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com> * refactor: dn instead of dotnet * refactor: format branches, extractor reorg * refactor: format selection and dotnet detect * feat: get format, arch, os * refactor: log errors and exceptions * ci: also test and build for dotnet-main dev * fix: import path * fix: circular dep * fix: remove buf argument feat: get runtime meta data * fix: log unsupported runtime error * fix: type ignore Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com> * fix: imports and add tests Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com> * test: checkout submodules recursively Co-authored-by: Capa Bot <capa-dev@mandiant.com> Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
119 lines
3.8 KiB
YAML
119 lines
3.8 KiB
YAML
name: build
|
|
|
|
on:
|
|
push:
|
|
branches: [master, dotnet-main]
|
|
release:
|
|
types: [edited, published]
|
|
|
|
jobs:
|
|
build:
|
|
name: PyInstaller for ${{ matrix.os }}
|
|
runs-on: ${{ matrix.os }}
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
- os: ubuntu-18.04
|
|
# use old linux so that the shared library versioning is more portable
|
|
artifact_name: capa
|
|
asset_name: linux
|
|
- os: windows-2022
|
|
artifact_name: capa.exe
|
|
asset_name: windows
|
|
- os: macos-10.15
|
|
artifact_name: capa
|
|
asset_name: macos
|
|
steps:
|
|
- name: Checkout capa
|
|
uses: actions/checkout@v2
|
|
with:
|
|
submodules: true
|
|
# using Python 3.8 to support running across multiple operating systems including Windows 7
|
|
- name: Set up Python 3.8
|
|
uses: actions/setup-python@v2
|
|
with:
|
|
python-version: 3.8
|
|
- if: matrix.os == 'ubuntu-18.04'
|
|
run: sudo apt-get install -y libyaml-dev
|
|
- name: Upgrade pip, setuptools
|
|
run: pip install --upgrade pip setuptools
|
|
- name: Install PyInstaller
|
|
run: pip install 'pyinstaller==4.10'
|
|
- name: Install capa
|
|
run: pip install -e .
|
|
- name: Build standalone executable
|
|
run: pyinstaller .github/pyinstaller/pyinstaller.spec
|
|
- name: Does it run (PE)?
|
|
run: dist/capa "tests/data/Practical Malware Analysis Lab 01-01.dll_"
|
|
- name: Does it run (Shellcode)?
|
|
run: dist/capa "tests/data/499c2a85f6e8142c3f48d4251c9c7cd6.raw32"
|
|
- name: Does it run (ELF)?
|
|
run: dist/capa "tests/data/7351f8a40c5450557b24622417fc478d.elf_"
|
|
- uses: actions/upload-artifact@v2
|
|
with:
|
|
name: ${{ matrix.asset_name }}
|
|
path: dist/${{ matrix.artifact_name }}
|
|
|
|
test_run:
|
|
# test that binaries run on push to master
|
|
if: github.event_name == 'push'
|
|
name: Test run on ${{ matrix.os }}
|
|
runs-on: ${{ matrix.os }}
|
|
needs: [build]
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
# OSs not already tested above
|
|
- os: ubuntu-18.04
|
|
artifact_name: capa
|
|
asset_name: linux
|
|
- os: ubuntu-20.04
|
|
artifact_name: capa
|
|
asset_name: linux
|
|
- os: windows-2022
|
|
artifact_name: capa.exe
|
|
asset_name: windows
|
|
steps:
|
|
- name: Download ${{ matrix.asset_name }}
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: ${{ matrix.asset_name }}
|
|
- name: Set executable flag
|
|
if: matrix.os != 'windows-2022'
|
|
run: chmod +x ${{ matrix.artifact_name }}
|
|
- name: Run capa
|
|
run: ./${{ matrix.artifact_name }} -h
|
|
|
|
zip_and_upload:
|
|
# upload zipped binaries to Release page
|
|
if: github.event_name == 'release'
|
|
name: zip and upload ${{ matrix.asset_name }}
|
|
runs-on: ubuntu-20.04
|
|
needs: [build]
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
- asset_name: linux
|
|
artifact_name: capa
|
|
- asset_name: windows
|
|
artifact_name: capa.exe
|
|
- asset_name: macos
|
|
artifact_name: capa
|
|
steps:
|
|
- name: Download ${{ matrix.asset_name }}
|
|
uses: actions/download-artifact@v2
|
|
with:
|
|
name: ${{ matrix.asset_name }}
|
|
- name: Set executable flag
|
|
run: chmod +x ${{ matrix.artifact_name }}
|
|
- name: Set zip name
|
|
run: echo "zip_name=capa-${GITHUB_REF#refs/tags/}-${{ matrix.asset_name }}.zip" >> $GITHUB_ENV
|
|
- name: Zip ${{ matrix.artifact_name }} into ${{ env.zip_name }}
|
|
run: zip ${{ env.zip_name }} ${{ matrix.artifact_name }}
|
|
- name: Upload ${{ env.zip_name }} to GH Release
|
|
uses: svenstaro/upload-release-action@v2
|
|
with:
|
|
repo_token: ${{ secrets.GITHUB_TOKEN}}
|
|
file: ${{ env.zip_name }}
|
|
tag: ${{ github.ref }}
|