aa_cc_kbc.yml

name: attestation-agent cc_kbc tests

on:
  push:
    branches:
      - 'main'
    paths:
      - 'attestation-agent/kbc/cc_kbc/**'
      - 'attestation-agent/kbs_protocol/**'
      - 'attestation-agent/lib/**'
      - '.github/workflows/aa_cc_kbc.yml'
  pull_request:
    paths:
      - 'attestation-agent/kbc/cc_kbc/**'
      - 'attestation-agent/kbs_protocol/**'
      - 'attestation-agent/lib/**'
      - '.github/workflows/aa_cc_kbc.yml'
  create:
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  cc_kbc_ci:
    if: github.event_name != 'push'
    name: Check
    defaults:
      run:
        working-directory: ./attestation-agent
    strategy:
      fail-fast: false
      matrix:
        rust:
          - stable
        instance:
          - ubuntu-24.04
          - ubuntu-24.04-arm
        include:
          - instance: ubuntu-24.04
            attester: snp-attester
          - instance: ubuntu-24.04
            attester: tdx-attester
          - instance: ubuntu-24.04
            attester: az-snp-vtpm-attester
          - instance: ubuntu-24.04
            attester: az-tdx-vtpm-attester
          - instance: ubuntu-24.04-arm
            attester: cca-attester
            # TODO: remove rust: 1.82.0 and exclude when the following issue is resolved
            # https://github.com/rust-lang/rust/issues/135867
            rust: 1.82.0
        exclude:
          - instance: ubuntu-24.04-arm
            rust: stable
    runs-on: ${{ matrix.instance }}
    steps:
      - name: Code checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Install Rust toolchain (${{ matrix.rust }})
        uses: actions-rs/toolchain@v1
        with:
          profile: minimal
          toolchain: ${{ matrix.rust }}
          override: true
          components: rustfmt, clippy

      - name: Install TPM dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libtss2-dev
        if: matrix.instance == 'ubuntu-24.04'

      - name: Install protoc
        run: |
          sudo apt-get update && sudo apt-get install -y protobuf-compiler

      - name: Build and install with ${{ matrix.attester }} feature
        run: |
          make ATTESTER=${{ matrix.attester }} && make install

      - name: Run rust lint check
        uses: actions-rs/cargo@v1
        with:
          command: clippy
          args: -p kbc --all-targets --features cc_kbc,${{ matrix.attester }},rust-crypto -- -D warnings

      - name: Run cargo test
        uses: actions-rs/cargo@v1
        with:
          command: test
          args: --features cc_kbc,${{ matrix.attester }},rust-crypto -p kbc