Let's use so far existing app-bitcoin-new docker image
What changed, and why it matters
This commit simply updates the GitHub Actions CI workflow to use the correct Docker image name for the newer 'app-bitcoin-new' project instead of the old 'app-bitcoin' image. It is a build/test infrastructure change with no effect on the app users install on their Ledger devices.
No security action needed. This is a routine CI maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff changes one line in .github/workflows/build_and_functional_tests.yml, switching the reusable Ragger test workflow’s container_image from ghcr.io/ledgerhq/app-bitcoin/speculos-bitcoin:latest to ghcr.io/ledgerhq/app-bitcoin-new/speculos-bitcoin:latest. This aligns the CI container with the current repository name. There is no code change to the application binary, cryptographic logic, or user-facing behavior.
Changed components
.github/workflows/build_and_functional_tests.ymlInspect captured patch +1 / −1
diff --git a/.github/workflows/build_and_functional_tests.yml b/.github/workflows/build_and_functional_tests.yml
index 155e905..a871b2a 100644
--- a/.github/workflows/build_and_functional_tests.yml
+++ b/.github/workflows/build_and_functional_tests.yml
@@ -43,7 +43,7 @@ jobs:
uses: LedgerHQ/ledger-app-workflows/.github/workflows/reusable_ragger_tests.yml@v1
with:
download_app_binaries_artifact: "compiled_app_binaries"
- container_image: "ghcr.io/ledgerhq/app-bitcoin/speculos-bitcoin:latest"
+ container_image: "ghcr.io/ledgerhq/app-bitcoin-new/speculos-bitcoin:latest"
# when merging a PR, we run the tests with the --enable_slow_tests parameter
test_options: ${{ github.event_name == 'push' && '--enable_slow_tests' || '' }}
regenerate_snapshots: ${{ github.event_name == 'workflow_dispatch' && inputs.golden_run == 'Open a PR' }}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.