From 583d3021fab28292475b456d83b3b489d8e24181 Mon Sep 17 00:00:00 2001
From: Otto Bittner <cobittner@posteo.net>
Date: Thu, 27 Jul 2023 13:29:43 +0200
Subject: [PATCH] ci: parse ovmf binaries from metadata (#1962)

Subsequently the metadata will be uploaded to the
attestationconfigapi so the CLI can use the data to
precalculate measurements.
---
 .../workflows/aws-snp-launchmeasurement.yml   | 24 +++++++------------
 1 file changed, 9 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/aws-snp-launchmeasurement.yml b/.github/workflows/aws-snp-launchmeasurement.yml
index 05d481e0c..484042e9a 100644
--- a/.github/workflows/aws-snp-launchmeasurement.yml
+++ b/.github/workflows/aws-snp-launchmeasurement.yml
@@ -47,25 +47,19 @@ jobs:
         ovmfPath=$(realpath result/ovmf_img.fd)
         echo "ovmfPath=${ovmfPath}" | tee -a "$GITHUB_OUTPUT"
 
-
-    - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+    - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # tag=v3.5.2
       with:
-        repository: IBM/sev-snp-measure.git
+        repository: edgelesssys/sev-snp-measure-go.git
         ref: main
-        path: sev-snp-measure
+        path: sev-snp-measure-go
 
-    - name: Run sev-snp-measure
+
+    - name: Generate API objects
       shell: bash
       run: |
-        pushd sev-snp-measure || exit 1
-        echo '[]' > intermediate.json
+        pushd sev-snp-measure-go/sevsnpmeasure || exit 1
+        go build .
 
-        for vcpus in 2 4 8 16 32 48 64;
-        do
-          measurement="$(./sev-snp-measure.py --mode snp --vmm-type=ec2 --vcpus="$vcpus" --ovmf=${{ steps.build-uefi.outputs.ovmfPath }})"
+        ./sevsnpmeasure parse-metadata ${{ steps.build-uefi.outputs.ovmfPath }} -o metadata.json
 
-          jq --arg vcpus "$vcpus" --arg measurement "$measurement" '. += [{"vcpus": $vcpus, "measurement": $measurement}]' intermediate.json > measurements.json
-          cp measurements.json intermediate.json
-        done
-
-        jq < measurements.json
+        jq < metadata.json