Skip to content

🌱(deps): Bump the all-gha-deps group with 2 updates (#279) #814

🌱(deps): Bump the all-gha-deps group with 2 updates (#279)

🌱(deps): Bump the all-gha-deps group with 2 updates (#279) #814

Workflow file for this run

name: PR CI
on: [push, pull_request]
permissions:
contents: read
jobs:
build:
env:
TAMAGO_VERSION: 1.22.4
TAMAGO: /usr/local/tamago-go/bin/go
APPLET_PRIVATE_KEY: /tmp/applet.sec
APPLET_PUBLIC_KEY: /tmp/applet.pub
LOG_ORIGIN: throwaway.transparency.dev/armored-witness-os/pr-build/0
LOG_PRIVATE_KEY: /tmp/log.sec
LOG_PUBLIC_KEY: /tmp/log.pub
OS_PRIVATE_KEY1: /tmp/os1.sec
OS_PUBLIC_KEY1: /tmp/os1.pub
OS_PRIVATE_KEY2: /tmp/os2.sec
OS_PUBLIC_KEY2: /tmp/os2.pub
APPLET_PATH: /tmp/assets
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
- name: Install tools
run: |
wget -q https://github.com/usbarmory/tamago-go/releases/download/tamago-go${TAMAGO_VERSION}/tamago-go${TAMAGO_VERSION}.linux-amd64.tar.gz
sudo tar -xf tamago-go${TAMAGO_VERSION}.linux-amd64.tar.gz -C /
sudo apt update
sudo apt install binutils-arm-none-eabi protobuf-compiler signify-openbsd u-boot-tools
go install google.golang.org/protobuf/cmd/[email protected]
echo "${HOME}/go/bin" >> $GITHUB_PATH
- name: Create throwaway keys & fake embed
run: |
go run github.com/transparency-dev/serverless-log/cmd/generate_keys@14ed652b57527bb17e065e921eb0fcce3cbc8a49 --key_name="TEST-APPLET" --out_priv=${APPLET_PRIVATE_KEY} --out_pub=${APPLET_PUBLIC_KEY}
go run github.com/transparency-dev/serverless-log/cmd/generate_keys@14ed652b57527bb17e065e921eb0fcce3cbc8a49 --key_name="TEST-LOG" --out_priv=${LOG_PRIVATE_KEY} --out_pub=${LOG_PUBLIC_KEY}
go run github.com/transparency-dev/serverless-log/cmd/generate_keys@14ed652b57527bb17e065e921eb0fcce3cbc8a49 --key_name="TEST-OS-1" --out_priv=${OS_PRIVATE_KEY1} --out_pub=${OS_PUBLIC_KEY1}
go run github.com/transparency-dev/serverless-log/cmd/generate_keys@14ed652b57527bb17e065e921eb0fcce3cbc8a49 --key_name="TEST-OS-2" --out_priv=${OS_PRIVATE_KEY2} --out_pub=${OS_PUBLIC_KEY2}
- name: Make
run: |
DEBUG=1 make trusted_os