gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2021-01-05	Add YAML validation for configuration files.	Adin Scannell
	For validation, the "on" key in existing YAML files is changed to a literal string. In the YAML spec, on is a keyword which encodes a boolean value, so without relying on a specific implementation the YAML files are technically not encoding an object that complies with the specification. PiperOrigin-RevId: 350172147
2020-10-26	Add nogo configuration.	Adin Scannell
	This splits the nogo rules into a separate configuration yaml file, and allows for multiple files to be provided. Because attrs cannot be passed down to aspects, this required that all findings are propagated up the aspect Provider. This doesn't mean that any extra work must be done, just that this information must be carried through the graph, and some additional starlark complexity is required. PiperOrigin-RevId: 339076357
2020-10-16	Refactor nogo to better support ARM.	Adin Scannell
	PiperOrigin-RevId: 337544107
2020-10-09	Minor nogo restructuring.	Adin Scannell
	PiperOrigin-RevId: 336343819
2020-10-08	Minor nogo cleanup.	Adin Scannell
	PiperOrigin-RevId: 336126583
2020-10-07	Add staticcheck and staticstyle analyzers.	Adin Scannell
	This change also adds support to go_stateify for detecting an appropriate receiver name, avoiding a large number of false positives. PiperOrigin-RevId: 335994587
2020-08-31	Change nogo failures to test failures, instead of build failures.	Adin Scannell
	PiperOrigin-RevId: 329408633
2020-08-26	Support stdlib analyzers with nogo.	Adin Scannell
	This immediately revealed an escape analysis violation (!), where the sync.Map was being used in a context that escapes were not allowed. This is a relatively minor fix and is included. PiperOrigin-RevId: 328611237
2020-08-06	Add bzl_library rules for .bzl files without one.	Adin Scannell
	PiperOrigin-RevId: 325280924
2020-04-20	Add internal nogo analysis & checkescape tool.	Adin Scannell
	See tools/nogo/README.md. The checkescape tool is able to perform recursive escape analysis, using the actual generated binary to confirm the results produced by the compiler itself. As an initial use case, this replaces the manual escape analysis tests used for go_marshal, and validates that the CopyIn and CopyOut paths will not require any allocation or stack splits. Updates #2243 PiperOrigin-RevId: 307532986