diff --git a/.github/workflows/check-measurements-reproducibility.yml b/.github/workflows/check-measurements-reproducibility.yml index dae243505..d711bd4cb 100644 --- a/.github/workflows/check-measurements-reproducibility.yml +++ b/.github/workflows/check-measurements-reproducibility.yml @@ -1,24 +1,26 @@ name: Check measurements reproducibility on: - release: - types: [created] workflow_dispatch: inputs: releasetag: type: string description: The release to checkout and download. required: true + workflow_call: + inputs: + releasetag: + type: string + description: The release to checkout and download. + required: true jobs: check-reproducibility: runs-on: ubuntu-22.04 - env: - RELEASETAG: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.releasetag || github.event.release.tag_name }} steps: - name: Checkout uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: - ref: ${{ env.RELEASETAG }} + ref: ${{ github.event.inputs.releasetag }} - name: Set up bazel uses: ./.github/actions/setup_bazel_nix with: @@ -40,7 +42,7 @@ jobs: cd $(mktemp -d) echo "Downloading release measurements" - curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ env.RELEASETAG }}/image/measurements.json + curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ github.event.inputs.releasetag }}/image/measurements.json # compare all measurements with our own for directory in $buildPath/system/!(mkosi_wrapper.sh); do