name: E2E Attestationconfig API Test
description: "Test the attestationconfig CLI is functional."

inputs:
  attestationVariant:
    description: "attestation variant to run tests against"
    default: "azure-sev-snp"
  cosignPrivateKey:
    description: "Cosign private key"
    required: true
  cosignPassword:
    description: "Password for Cosign private key"
    required: true

runs:
  using: "composite"
  steps:
    - name: Setup bazel
      uses: ./.github/actions/setup_bazel_nix

    - name: Login to AWS
      uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v4.2.1
      with:
        role-to-assume: arn:aws:iam::795746500882:role/GithubTestResourceAPI
        aws-region: eu-west-1

    - name: Run attestationconfig API E2E
      shell: bash
      env:
        COSIGN_PRIVATE_KEY: ${{ inputs.cosignPrivateKey }}
        COSIGN_PASSWORD: ${{ inputs.cosignPassword }}
      run: |
        bazel run //internal/api/attestationconfigapi/cli:cli_e2e_test -- ${{ inputs.attestationVariant }}