NOISSUE - Track TDX policy (#557)

* Add initial implementation of attestation policy for SEV-SNP and TDX, including JSON configuration files and build scripts

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Update working directory for Rust CI pipeline to sev-snp

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* fix build

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* fix tests

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* fix tests

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

---------

Signed-off-by: Sammy Oina <sammyoina@gmail.com>
This commit is contained in:
Sammy Kerata Oina
2026-01-12 16:59:23 +03:00
committed by GitHub
parent c422afe0a6
commit 3498db14fb
22 changed files with 243 additions and 27 deletions
+1 -1
View File
@@ -596,7 +596,7 @@ func prepVerifyAttReport(t *testing.T) *sevsnp.Attestation {
}
func setAttestationPolicy(rr *sevsnp.Attestation, policyDirectory string) error {
attestationPolicyFile, err := os.ReadFile("../../scripts/attestation_policy/attestation_policy.json")
attestationPolicyFile, err := os.ReadFile("../../scripts/attestation_policy/sev-snp/attestation_policy.json")
if err != nil {
return err
}
+1 -1
View File
@@ -807,7 +807,7 @@ func prepVerifyAttReport(t *testing.T) (*sevsnp.Attestation, []byte) {
}
func setAttestationPolicy(rr *sevsnp.Attestation, policyDirectory string) error {
attestationPolicyFile, err := os.ReadFile("../../../scripts/attestation_policy/attestation_policy.json")
attestationPolicyFile, err := os.ReadFile("../../../scripts/attestation_policy/sev-snp/attestation_policy.json")
if err != nil {
return err
}
+1 -1
View File
@@ -92,7 +92,7 @@ func TestNewClient(t *testing.T) {
ClientKey: clientKeyFile,
},
AttestedTLS: true,
AttestationPolicy: "../../../scripts/attestation_policy/attestation_policy.json",
AttestationPolicy: "../../../scripts/attestation_policy/sev-snp/attestation_policy.json",
},
wantErr: false,
err: nil,