payload.yaml

name: Publish Enclave CC CI payloads for Confidential Containers
on:
  push:
    branches:
      - 'main'

permissions:
  contents: read

jobs:
  build-asset:
    runs-on: ubuntu-22.04
    strategy:
      matrix:
        include:
          - sgx_mode: SIM
            kbc: sample-kbc
          - sgx_mode: HW
            kbc: cc-kbc
    steps:
      - name: Login to quay.io
        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
        with:
          registry: quay.io
          username: ${{ secrets.COCO_QUAY_DEPLOYER_USERNAME }}
          password: ${{ secrets.COCO_QUAY_DEPLOYER_PASSWORD }}

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          fetch-depth: 0 # This is needed in order to keep the commit ids history
      - name: Build Enclave CC Payload using SGX_MODE=${{ matrix.sgx_mode }} KBC=${{ matrix.kbc }}
        run: |
          ./tools/packaging/build/build_payload.sh 
        env:
          SGX_MODE: ${{ matrix.sgx_mode }}
          KBC: ${{ matrix.kbc }}
          CI: yes
          PUSH: yes