Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

wolfSSL / wolfTrust Public

Notifications You must be signed in to change notification settings
Fork 1
Star 3

Code
Issues 1
Pull requests 1
Actions
Projects
Wiki
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Wiki
Security and quality
Insights

Enable LTO without weakening secure isolation - #18

#18

Merged

danielinux merged 1 commit into

wolfSSL:mainwolfSSL/wolfTrust:mainfrom

aidangarske:size/lto-isolationaidangarske/wolfTrust-fork:size/lto-isolationCopy head branch name to clipboard

Sep 24, 2026

Conversation Commits1 (1)Checks Files changed

Merged

Enable LTO without weakening secure isolation#18
danielinux merged 1 commit into
wolfSSL:mainfrom
aidangarske:size/lto-isolation

Enable LTO without weakening security

1c28b03

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Sign in for the full log view

Valgrind on: pull_request 2

Host tests (Valgrind)

Cross compilation on: pull_request 2

Cortex-M33 cross compilation

Core/port split guard on: pull_request 2

core/port split guard + vnet image

Fuzz Testing on: pull_request 3

select

fuzz (spm-smoke, wt_spm_fuzz, 60, true, 4096)

Compiler matrix on: pull_request 6

Host tests (GCC 12)

Host tests (GCC 13)

Host tests (GCC 14)

Host tests (GCC 15)

Host tests (Clang 17)

Host tests (Clang 18)

Unit tests on: pull_request 88

Discover host suites

Arm PSA FF conformance

CBOR interop (wolfCOSE and QCBOR)

domain

manifest

lifecycle

guest_verify

rollback

sp_recovery

ipc

ffm

spm

vnet

wolfhsm_loopback

wolfhsm_relay

native_wire

native_wire_client

keystore_isolation

attestation_service

attestation

attestation_token

attestation_golden

attestation_negatives

attestation_replay

attestation_iak

ffm_domain

sp_layout

port_binding

boot_handoff

spm_gate

flash_nvm

ffm_veneer

secure_layout

vault_service

storage_service

ps_service

negatives

qcbor_shim

fwu_service

runtime_verify

psa_ffm_client

psa_storage_client

vnet_relay

psa_headers

Sanitizers on: pull_request 2

Host tests (ASan and UBSan)

M33MU on: pull_request 116

wolfBoot signed boot and rollback (stm32h5-tz-psa, nucleo_h563zi/stm32h563xx/ns)

wolfTrust zephyr lifecycle (native)

wolfTrust zephyr lifecycle (hsm)

wolfTrust freertos lifecycle (native)

wolfTrust freertos lifecycle (hsm)

Positive lifecycle (native)

Both-OS PSA parity (Zephyr + FreeRTOS) (native)

Both-OS FF-M isolation negatives (native)

Guest restart recovery (native)

Cross-domain isolation (L3) (native)

Keystore-band isolation (L3) (native)

Graceful SP fault recovery (native)

Secure-caller misuse panic (native)

FF-M IPC conformance (85/4) (native)

dev_apis Storage (s001-s017) (native)

dev_apis Crypto (c001-c080) (native)

dev_apis Initial Attestation (a001, shim) (native)

dev_apis Initial Attestation (a001, QCBOR) (native)

Attestation negatives (IPC + tamper) (native)

Authenticated launch fail-closed (native)

Anti-rollback downgrade refused (native)

Vault recovery self-heal (native)

Vault recovery fail-closed (native)

PSA Firmware Update staging (native)

Runtime re-measurement quarantine (native)

Full boot-and-update swap gate (native)

wolfIP virtual network (mediated ping) (native)

Confined VNET isolation negatives (native)

Corrupted-manifest activation refused (native)

NS MPU bypass cannot reach peer guest RAM (native)

SP restart-budget exhaustion escalates (native)

Positive lifecycle (hsm)

Both-OS PSA parity (Zephyr + FreeRTOS) (hsm)

Both-OS FF-M isolation negatives (hsm)

Guest restart recovery (hsm)

Cross-domain isolation (L3) (hsm)

Keystore-band isolation (L3) (hsm)

Graceful SP fault recovery (hsm)

Secure-caller misuse panic (hsm)

FF-M IPC conformance (85/4) (hsm)

dev_apis Storage (s001-s017) (hsm)

dev_apis Crypto (c001-c080) (hsm)

dev_apis Initial Attestation (a001, shim) (hsm)

dev_apis Initial Attestation (a001, QCBOR) (hsm)

Attestation negatives (IPC + tamper) (hsm)

wolfHSM cross-namespace + NVM relay negatives (hsm)

Authenticated launch fail-closed (hsm)

Anti-rollback downgrade refused (hsm)

Vault recovery self-heal (hsm)

Vault recovery fail-closed (hsm)

PSA Firmware Update staging (hsm)

Runtime re-measurement quarantine (hsm)

Full boot-and-update swap gate (hsm)

wolfIP virtual network (mediated ping) (hsm)

Confined VNET isolation negatives (hsm)

Corrupted-manifest activation refused (hsm)

NS MPU bypass cannot reach peer guest RAM (hsm)

SP restart-budget exhaustion escalates (hsm)

Dependency integrations on: pull_request 13

resolve / resolve

wolfCOSE integration (pinned)

wolfCOSE integration (latest-stable)

wolfCOSE integration (master)

wolfPSA integration (pinned)

wolfPSA integration (latest-stable)

wolfPSA integration (master)

Annotations

1 warning and 1 notice

Complete job

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Host tests (Valgrind)

succeeded Sep 23, 2026 in 2m 41s

Loading

Re-running jobs...

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.