build(deps): bump github/codeql-action from 2 to 3 #334
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| push: | |
| paths-ignore: | |
| - "**.md" | |
| pull_request: | |
| paths-ignore: | |
| - "**.md" | |
| workflow_dispatch: | |
| name: Build | |
| env: | |
| AS: nasm | |
| AR_x86_64_unknown_linux_gnu: llvm-ar | |
| CC_x86_64_unknown_linux_gnu: clang | |
| AR_x86_64_unknown_none: llvm-ar | |
| CC_x86_64_unknown_none: clang | |
| RUST_TOOLCHAIN: nightly-2023-12-31 | |
| TOOLCHAIN_PROFILE: minimal | |
| jobs: | |
| system_compile: | |
| name: Compile the final.bin file | |
| runs-on: ${{ matrix.host_os }} | |
| timeout-minutes: 30 | |
| strategy: | |
| matrix: | |
| host_os: | |
| - ubuntu-20.04 | |
| - windows-2019 | |
| steps: | |
| # Install first since it's needed to build NASM | |
| - name: Install LLVM and Clang | |
| uses: KyleMayes/install-llvm-action@v2 | |
| with: | |
| version: "10.0" | |
| directory: ${{ runner.temp }}/llvm | |
| - name: install NASM | |
| uses: ilammy/setup-nasm@v1 | |
| - name: Checkout sources | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| - name: Install toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: ${{ env.RUST_TOOLCHAIN }} | |
| components: rust-src | |
| - name: Run cargo install cargo-xbuild | |
| run: cargo install cargo-xbuild | |
| - name: Preparation Work | |
| run: bash sh_script/preparation.sh | |
| - name: Test Shim Crates | |
| run: make test | |
| - name: Build Release TdShim | |
| run: cargo xbuild -p td-shim --target x86_64-unknown-none --release --features=main,tdx | |
| - name: Build Debug TdShim | |
| run: cargo xbuild -p td-shim --target x86_64-unknown-none --features=main,tdx --no-default-features | |
| - name: Build td-shim-tools | |
| run: | | |
| cargo build -p td-shim-tools | |
| - name: Build image without payload | |
| run: | | |
| cargo image --release | |
| - name: Meta data check | |
| run: | | |
| cargo run -p td-shim-tools --bin td-shim-checker --no-default-features --features=loader -- target/release/final.bin | |
| - name: Build debug image without payload | |
| run: | | |
| cargo image | |
| - name: Build Release Elf format payload | |
| run: | | |
| cargo image --example-payload --release | |
| - name: Build Debug Elf format payload | |
| run: | | |
| cargo image --example-payload |