draft(ci): automate og-tdx CVM build → publish → attest (version×env×owner)#32

Merged

Wilbert957 merged 10 commits into

mainfrom

draft/cvm-ci-automation

Jul 13, 2026

Commits on Jul 13, 2026

draft(ci): automate og-tdx CVM build/publish/attest (version×env×owner)

Wei
and
claude
committed
draft(ci): build the #128-fixed cryptpilot-fde from pinned fork source; real ref-value generator

Wei
and
claude
committed
draft(ci): move fixed config to repo Actions Variables (KBS/project/bucket/AS/fde-ref)

Wei
and
claude
committed
draft(ci): local base-image cache + non-blocking smoke test + checkout dispatched ref

Wei
and
claude
committed
draft(ci): pin cryptpilot-fde to fix/srv-default-entry (saved_entry fallback), not the ESP-convert branch

Wei
and
claude
committed
feat(gcp-cvm): migrate to cryptpilot 0.8.0 + #128/#130; simplify build (drop fix-B & keep-generic workarounds)

Wei
and
claude
committed
feat(ci): dual trigger — release auto-builds default owner; dispatch for custom owner

Wei
and
claude
committed
refactor(ci): rename DEFAULT_OWNER_ADDRESS var -> OWNER_ADDRESS

Wei
and
claude
committed
harden(ci): keep GCP SA credential off the persistent runner

Wei
and
claude
committed
fix(ci): don't use runner.temp in job-level env (startup failure)

Wei
and
claude
committed