Merge pull request #490 from confidential-containers/dependabot/cargo… #393
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish Enclave CC CI payloads for Confidential Containers | |
| on: | |
| push: | |
| branches: | |
| - 'main' | |
| permissions: | |
| contents: read | |
| jobs: | |
| build-asset: | |
| runs-on: ubuntu-22.04 | |
| strategy: | |
| matrix: | |
| include: | |
| - sgx_mode: SIM | |
| kbc: sample-kbc | |
| - sgx_mode: HW | |
| kbc: cc-kbc | |
| steps: | |
| - name: Login to quay.io | |
| uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 | |
| with: | |
| registry: quay.io | |
| username: ${{ secrets.COCO_QUAY_DEPLOYER_USERNAME }} | |
| password: ${{ secrets.COCO_QUAY_DEPLOYER_PASSWORD }} | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 | |
| with: | |
| fetch-depth: 0 # This is needed in order to keep the commit ids history | |
| - name: Build Enclave CC Payload using SGX_MODE=${{ matrix.sgx_mode }} KBC=${{ matrix.kbc }} | |
| run: | | |
| ./tools/packaging/build/build_payload.sh | |
| env: | |
| SGX_MODE: ${{ matrix.sgx_mode }} | |
| KBC: ${{ matrix.kbc }} | |
| CI: yes | |
| PUSH: yes |