Files
cocos/scripts/attestation_policy/sev-snp/README.md
T
Sammy Kerata Oina 3498db14fb NOISSUE - Track TDX policy (#557)
* Add initial implementation of attestation policy for SEV-SNP and TDX, including JSON configuration files and build scripts

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Update working directory for Rust CI pipeline to sev-snp

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* fix build

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* fix tests

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* fix tests

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

---------

Signed-off-by: Sammy Oina <sammyoina@gmail.com>
2026-01-12 14:59:23 +01:00

713 B

Rust project for fetching Attestation Policy

This rust project fetches information from the host system needed for validation of the attestation report. It outputs a JSON file that contains the said information. The JSON file is in a format that can be used with the go-sev-guest library.

Usage

Clone cocos repository:

git clone git@github.com:ultravioletrs/cocos.git
cd ./cocos/scripts/attestation_policy 
make

Then run the binary. Keep in mind that you have to specify the policy of the Guest VM:

cd ./target/release

# Run with option --policy (policy is 64 bit number) 
./attestation_policy --policy 196608 --pcr ../../pcr_values.json