diff --git a/.github/workflows/check-measurements-reproducibility.yml b/.github/workflows/check-measurements-reproducibility.yml index 964395be0..9ef22d1ae 100644 --- a/.github/workflows/check-measurements-reproducibility.yml +++ b/.github/workflows/check-measurements-reproducibility.yml @@ -2,15 +2,23 @@ name: Check measurements reproducibility on: workflow_dispatch: inputs: - releasetag: + version: type: string - description: The release to checkout and download. + description: The version of the measurements that are downloaded from the CDN. + required: true + ref: + type: string + description: The git ref to check out. required: true workflow_call: inputs: - releasetag: + version: type: string - description: The release to checkout and download. + description: The version of the measurements that are downloaded from the CDN. + required: true + ref: + type: string + description: The git ref to check out. required: true jobs: @@ -20,7 +28,7 @@ jobs: - name: Checkout uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: - ref: ${{ github.event.inputs.releasetag }} + ref: ${{ github.event.inputs.ref }} - name: Set up bazel uses: ./.github/actions/setup_bazel_nix with: @@ -43,7 +51,7 @@ jobs: - name: Download measurements run: | - curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ github.event.inputs.releasetag }}/image/measurements.json + curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ github.event.inputs.version }}/image/measurements.json - name: Cleanup release measurements and generate our own run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f8dcbbf9c..63024482c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -241,10 +241,11 @@ jobs: check-measurements-reproducibility: name: Check measurements reproducibility - needs: [os-image] + needs: [verify-inputs, os-image] uses: ./.github/workflows/check-measurements-reproducibility.yml with: - releasetag: ${{ inputs.version }} + version: ${{ inputs.version }} + ref: ${{ needs.verify-inputs.outputs.WORKING_BRANCH }} update-hardcoded-measurements: name: Update hardcoded measurements (in the CLI)