feat(ci): Run hardening-check script on Ubuntu 24.04 build binary

Author: dwatteau

.github/workflows/build.yml

@@ -61,7 +61,11 @@ jobs:
         run: |
           sudo apt-get update
           sudo apt-get install -y g++-${{ matrix.gccver }}
-          sudo apt-get clean
+
+      - name: 'Install Debian devscripts (Ubuntu-24.04 only)'
+        if: startsWith(matrix.os, 'ubuntu-24.04')
+        run: |
+          sudo apt-get install -y --no-install-recommends devscripts
 
       - name: 'Switch to newest available Xcode (macOS only)'
         if: startsWith(matrix.os, 'macos')
@@ -77,3 +81,11 @@ jobs:
 
       - name: Build
         run: cmake --build ${{github.workspace}}/build -j1
+#        env:
+#          VERBOSE: 1
+
+      # TODO: Look at https://github.com/microsoft/binskim as well?
+      - name: 'Run hardening-check on main binary (Ubuntu-24.04 only)'
+        if: startsWith(matrix.os, 'ubuntu-24.04')
+        run: |
+          hardening-check ${{github.workspace}}/build/bin/scummtr

.github/workflows/lint-manpages.yml

@@ -24,7 +24,6 @@ jobs:
         run: |
           sudo apt-get -qq update
           sudo apt-get -qq install -o=Dpkg::Use-Pty=0 -y mandoc
-          sudo apt-get clean
           dpkg-query -W -f='\nCurrent mandoc is ${binary:Package} ${Version}\n' mandoc
 
       - name: Run mandoc linter