Make workflow workflow_call

This commit is contained in:
miampf 2025-02-18 11:32:49 +01:00
parent 785e54926c
commit 8d73e31cbc
No known key found for this signature in database
GPG Key ID: EF039364B5B6886C

View File

@ -1,24 +1,26 @@
name: Check measurements reproducibility
on:
release:
types: [created]
workflow_dispatch:
inputs:
releasetag:
type: string
description: The release to checkout and download.
required: true
workflow_call:
inputs:
releasetag:
type: string
description: The release to checkout and download.
required: true
jobs:
check-reproducibility:
runs-on: ubuntu-22.04
env:
RELEASETAG: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.releasetag || github.event.release.tag_name }}
steps:
- name: Checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
ref: ${{ env.RELEASETAG }}
ref: ${{ github.event.inputs.releasetag }}
- name: Set up bazel
uses: ./.github/actions/setup_bazel_nix
with:
@ -40,7 +42,7 @@ jobs:
cd $(mktemp -d)
echo "Downloading release measurements"
curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ env.RELEASETAG }}/image/measurements.json
curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ github.event.inputs.releasetag }}/image/measurements.json
# compare all measurements with our own
for directory in $buildPath/system/!(mkosi_wrapper.sh); do