Add build-essential and git to speculos-bitcoin image
What the developer wrote
Authored by Salvatore Ingala
Add build-essential and git to speculos-bitcoin image
What changed, and why it matters
This commit only changes a CI/testing Docker image used for Ledger's automated test environment. It adds common development tools (build-essential, curl, git) and slightly reorganizes apt commands. There is no indication this affects the actual Bitcoin app that runs on Ledger devices or end-user security.
No security action required. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies .github/workflows/Dockerfile, which builds the speculos-bitcoin container used in GitHub Actions workflows. It adds a new RUN layer installing build-essential, curl, and git, and removes the redundant apt update from the next layer. These are build/test environment dependencies, not application code, firmware, or cryptographic logic. No security-sensitive change is present in the diff.
Changed components
.github/workflows/DockerfileInspect captured patch +4 / −1
diff --git a/.github/workflows/Dockerfile b/.github/workflows/Dockerfile
index 8fb20b1..b10b678 100644
--- a/.github/workflows/Dockerfile
+++ b/.github/workflows/Dockerfile
@@ -21,8 +21,11 @@ RUN cd / && \
FROM ghcr.io/ledgerhq/speculos:latest
COPY --from=0 /usr/local/bin/ /usr/local/bin/
+# install essential tools
+RUN apt update -y && apt install -y build-essential curl git
+
# install runtime dependencies for bitcoind
-RUN apt update -y && apt install -y libminiupnpc-dev libminiupnpc-dev libnatpmp-dev libevent-dev libzmq3-dev
+RUN apt install -y libminiupnpc-dev libminiupnpc-dev libnatpmp-dev libevent-dev libzmq3-dev
# Add bitcoin binaries to path
ENV PATH=/usr/local/bin/:$PATH
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.