d-flex flex-column width-full">

Add caller-supplied policy authorization for TPM firmware upgrade

bda21be

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Sign in for the full log view

Seal Test Suite on: pull_request

seal-test

PQC Examples (v1.85) on: pull_request

pqc-examples

PQC TLS 1.3 examples (ML-DSA auth + ML-KEM)

Release Checks on: pull_request

Build wolfSSL

C++ build (CC=g++)

scan-build (clang static analysis)

Freestanding Build (WOLFTPM_NO_STD_HEADERS) on: pull_request

freestanding

CodeQL on: pull_request

CodeQL (C, security)

SPDM Test on: pull_request 9

build-only (spdm-tcg-only, --enable-fwtpm --enable-spdm --enable-tcg --disable-psk)

build-only (spdm-both, --enable-fwtpm --enable-spdm --enable-tcg --enable-psk)

build-only (spdm-nuvoton, --enable-fwtpm --enable-spdm --enable-nuvoton)

build-only (spdm-nations, --enable-fwtpm --enable-spdm --enable-nations)

build-only (spdm-full-vendors, --enable-fwtpm --enable-spdm --enable-tcg --enable-psk --enable-nu...

build-only (spdm-requester-only, --enable-spdm --enable-nuvoton --enable-nations)

build-only (spdm-debug-on, --enable-fwtpm --enable-spdm --enable-tcg --enable-psk --enable-debug)

e2e (fwtpm-tcg, fwtpm-tcg)

e2e (fwtpm-psk, fwtpm-psk)

Windows Build Test on: pull_request

build

fwTPM Tests on: pull_request 1

fwtpm-examples

fwtpm-da-retry

ibmswtpm-tpm2tools

fwtpm-emulator

fwtpm-valgrind

Zephyr wolfTPM Tests on: pull_request

Build

SBOM Test on: pull_request 1

wolfTPM SBOM generation (linux)

Semgrep on: pull_request

Semgrep (wolfTPM security rules)

Multiple Compilers on: pull_request

Build wolfSSL

matrix.cc

Smoke Test on: pull_request 3

Empty Brace Scope Scan

smoke (swtpm-default, --enable-swtpm --disable-fwtpm, true)

smoke (fwtpm-default, --enable-fwtpm --enable-swtpm --enable-debug, false)

Codespell on: pull_request

Check spelling

PQC Build Matrix (v1.85 trimming) on: pull_request

build

reject-no-pqc

WolfTPM CMake Build Tests on: pull_request

build

CMake static export check

WolfTPM Build Tests on: pull_request

discover

build

wolfSSL Version Matrix on: pull_request

resolve-wolfssl

Resolve wolfSSL version matrix

wolfSSL ${{ matrix.wolfssl-version }}

Sanitizer Tests on: pull_request

discover

matrix.name

Seal Test Suite on: pull_request 1

seal-test

Release Checks on: pull_request 3

Build wolfSSL

C++ build (CC=g++)

scan-build (clang static analysis)

WolfTPM CMake Build Tests on: pull_request 33

build (Defaults, ubuntu-latest)

build (Module ST33 SPI, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_MODULE=st33)

build (Module ST33 I2C, ubuntu-latest, -DWOLFTPM_INTERFACE=I2C -DWOLFTPM_MODULE=st33)

build (Module ST33 Firmware, ubuntu-latest, -DWOLFTPM_MODULE=st33 -DWOLFTPM_FIRMWARE=yes)

build (Module Microchip, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_MODULE=microchip)

build (Module Nuvoton, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_MODULE=nuvoton)

build (Module SLB9670, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_MODULE=slb9670)

build (Module SLB9672, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_MODULE=slb9672)

build (Module SLB9673 I2C, ubuntu-latest, -DWOLFTPM_INTERFACE=I2C -DWOLFTPM_MODULE=slb9673)

build (No Wrapper, ubuntu-latest, -DWOLFTPM_WRAPPER=no)

build (I2C Enabled (legacy), ubuntu-latest, -DWOLFTPM_I2C=yes)

build (Interface I2C, ubuntu-latest, -DWOLFTPM_INTERFACE=I2C)

build (Interface SPI, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI)

build (Advanced IO, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_ADVIO=yes)

build (Advanced IO I2C, ubuntu-latest, -DWOLFTPM_INTERFACE=I2C -DWOLFTPM_ADVIO=yes)

build (MMIO Enabled, ubuntu-latest, -DWOLFTPM_MMIO=yes)

build (Check Wait State Enabled, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_CHECK_WAIT_STAT...

build (Check Wait State Disabled, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_CHECK_WAIT_STA...

build (TIS Lock Enabled, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_TIS_LOCK=yes)

build (Small Stack, ubuntu-latest, -DWOLFTPM_INTERFACE=SPI -DWOLFTPM_SMALL_STACK=yes)

build (No HAL, ubuntu-latest, -DWOLFTPM_HAL=no)

build (No Firmware, ubuntu-latest, -DWOLFTPM_FIRMWARE=no)

build (Debug Verbose, ubuntu-latest, -DWOLFTPM_DEBUG=verbose)

build (Debug IO, ubuntu-latest, -DWOLFTPM_DEBUG=io)

build (No Examples, ubuntu-latest, -DWOLFTPM_EXAMPLES=no)

build (Combined Options, ubuntu-latest, -DWOLFTPM_INTERFACE=I2C -DWOLFTPM_MODULE=st33 -DWOLFTPM_A...

build (fwTPM Socket, ubuntu-latest, -DWOLFTPM_FWTPM=yes -DWOLFTPM_INTERFACE=SWTPM)

build (fwTPM TIS, ubuntu-latest, -DWOLFTPM_FWTPM=yes -DWOLFTPM_INTERFACE=SPI)

build (fwTPM Only, ubuntu-latest, -DWOLFTPM_FWTPM_ONLY=yes -DWOLFTPM_INTERFACE=SWTPM)

build (fwTPM Socket (Windows), windows-latest, -DWOLFTPM_FWTPM=yes -DWOLFTPM_INTERFACE=SWTPM)

CMake static export check

Codespell on: pull_request 1

Check spelling

Fuzz Testing on: pull_request 2

select

fuzz (fuzz-smoke, 60, true, 4096)

fuzz (fuzz-smoke-pqc, 60, true, --enable-dilithium --enable-mlkem --enable-experimental --enable-...

Multiple Compilers on: pull_request 7

Build wolfSSL

gcc-11

gcc-12

gcc-13

clang-14

clang-15

clang-17

Windows Build Test on: pull_request 1

build

PQC Examples (v1.85) on: pull_request 2

pqc-examples

PQC TLS 1.3 examples (ML-DSA auth + ML-KEM)

Freestanding Build (WOLFTPM_NO_STD_HEADERS) on: pull_request 1

freestanding

Smoke Test on: pull_request 3

Empty Brace Scope Scan

smoke (swtpm-default, --enable-swtpm --disable-fwtpm, true)

smoke (fwtpm-default, --enable-fwtpm --enable-swtpm --enable-debug, false)

PQC Build Matrix (v1.85 trimming) on: pull_request 37

build (cli-mldsa_all-mlkem_all, --enable-pqc --enable-mldsa=all --enable-mlkem=all --disable-fwtp...

build (cli-mldsa_all-mlkem_enc, --enable-pqc --enable-mldsa=all --enable-mlkem=enc --disable-fwtp...

build (cli-mldsa_all-mlkem_dec, --enable-pqc --enable-mldsa=all --enable-mlkem=dec --disable-fwtp...

build (cli-mldsa_all-mlkem_no, --enable-pqc --enable-mldsa=all --enable-mlkem=no --disable-fwtpm ...

build (cli-mldsa_signonly-mlkem_all, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=all --d...

build (cli-mldsa_signonly-mlkem_enc, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=enc --d...

build (cli-mldsa_signonly-mlkem_dec, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=dec --d...

build (cli-mldsa_signonly-mlkem_no, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=no --dis...

build (cli-mldsa_verifyonly-mlkem_all, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=all...

build (cli-mldsa_verifyonly-mlkem_enc, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=enc...

build (cli-mldsa_verifyonly-mlkem_dec, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=dec...

build (cli-mldsa_verifyonly-mlkem_no, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=no -...

build (cli-mldsa_no-mlkem_all, --enable-pqc --enable-mldsa=no --enable-mlkem=all --disable-fwtpm ...

build (cli-mldsa_no-mlkem_enc, --enable-pqc --enable-mldsa=no --enable-mlkem=enc --disable-fwtpm ...

build (cli-mldsa_no-mlkem_dec, --enable-pqc --enable-mldsa=no --enable-mlkem=dec --disable-fwtpm ...

build (fw-mldsa_all-mlkem_all, --enable-pqc --enable-mldsa=all --enable-mlkem=all --enable-fwtpm ...

build (fw-mldsa_all-mlkem_enc, --enable-pqc --enable-mldsa=all --enable-mlkem=enc --enable-fwtpm ...

build (fw-mldsa_all-mlkem_dec, --enable-pqc --enable-mldsa=all --enable-mlkem=dec --enable-fwtpm ...

build (fw-mldsa_all-mlkem_no, --enable-pqc --enable-mldsa=all --enable-mlkem=no --enable-fwtpm --...

build (fw-mldsa_signonly-mlkem_all, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=all --en...

build (fw-mldsa_signonly-mlkem_enc, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=enc --en...

build (fw-mldsa_signonly-mlkem_dec, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=dec --en...

build (fw-mldsa_signonly-mlkem_no, --enable-pqc --enable-mldsa=sign-only --enable-mlkem=no --enab...

build (fw-mldsa_verifyonly-mlkem_all, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=all ...

build (fw-mldsa_verifyonly-mlkem_enc, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=enc ...

build (fw-mldsa_verifyonly-mlkem_dec, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=dec ...

build (fw-mldsa_verifyonly-mlkem_no, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=no --...

build (fw-mldsa_no-mlkem_all, --enable-pqc --enable-mldsa=no --enable-mlkem=all --enable-fwtpm --...

build (fw-mldsa_no-mlkem_enc, --enable-pqc --enable-mldsa=no --enable-mlkem=enc --enable-fwtpm --...

build (fw-mldsa_no-mlkem_dec, --enable-pqc --enable-mldsa=no --enable-mlkem=dec --enable-fwtpm --...

build (cli-disable-pqc, --disable-pqc --disable-fwtpm --disable-examples)

build (cli-v185-full, --enable-v185 --disable-fwtpm --disable-examples)

build (cli-verifyencap-nohash, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=enc --disab...

build (fw-disable-pqc, --disable-pqc --enable-fwtpm --disable-examples)

build (fw-v185-full, --enable-v185 --enable-fwtpm --disable-examples)

build (fw-verifyencap-nohash, --enable-pqc --enable-mldsa=verify-only --enable-mlkem=enc --disabl...

reject-no-pqc

CodeQL on: pull_request 3

CodeQL (C, security)

Semgrep on: pull_request 1

Semgrep (wolfTPM security rules)

fwTPM Tests on: pull_request 30

fwtpm-examples (fwtpm-socket, ubuntu-latest, --enable-fwtpm --enable-swtpm --enable-debug, --enab...

fwtpm-examples (fwtpm-tis, ubuntu-latest, --enable-fwtpm --enable-debug, --enable-wolftpm --enabl...

fwtpm-examples (fwtpm-v185, ubuntu-latest, --enable-fwtpm --enable-v185, --enable-wolftpm --enabl...

fwtpm-examples (fwtpm-v185-build-only, ubuntu-latest, --enable-fwtpm --enable-v185, --enable-wolf...

fwtpm-examples (fwtpm-no-rsa, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm --en...

fwtpm-examples (fwtpm-no-ecc, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm --en...

fwtpm-examples (fwtpm-no-sha384, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm -...

fwtpm-examples (fwtpm-no-sha1, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm --e...

fwtpm-examples (fwtpm-only, ubuntu-latest, --enable-fwtpm-only --enable-swtpm, --enable-wolftpm -...

fwtpm-examples (fwtpm-minimal, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm --e...

fwtpm-examples (fwtpm-no-policy, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm -...

fwtpm-examples (fwtpm-no-nv, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm --ena...

fwtpm-examples (fwtpm-no-attestation, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolf...

fwtpm-examples (fwtpm-no-credential, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolft...

fwtpm-examples (fwtpm-no-da, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm --ena...

fwtpm-examples (fwtpm-no-param-enc, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftp...

fwtpm-examples (fwtpm-no-rsa-no-policy, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wo...

fwtpm-examples (fwtpm-no-ecc-no-nv, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftp...

fwtpm-examples (fwtpm-small-stack, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftpm...

fwtpm-examples (fwtpm-pedantic-gcc, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolftp...

fwtpm-examples (fwtpm-pedantic-clang, ubuntu-latest, --enable-fwtpm --enable-swtpm, --enable-wolf...

fwtpm-examples (fwtpm-pedantic-only, ubuntu-latest, --enable-fwtpm-only, --enable-wolftpm --enabl...

fwtpm-examples (fwtpm-macos-socket, --enable-fwtpm --enable-swtpm --enable-debug, --enable-wolftp...

fwtpm-da-retry

ibmswtpm-tpm2tools

fwtpm-emulator

fwtpm-valgrind (fwtpm-valgrind-default)

fwtpm-valgrind (fwtpm-valgrind-smallstack, -DWOLFTPM_SMALL_STACK)

fwtpm-valgrind (fwtpm-valgrind-noheap, -DWOLFTPM2_NO_HEAP)

Zephyr wolfTPM Tests on: pull_request 1

Build (v3.4.0, 0.16.1)

Sanitizer Tests on: pull_request 9

discover / Resolve wolfSSL version matrix

ASan

UBSan

LeakSan

ASan (latest-stable)

UBSan (latest-stable)

LeakSan (latest-stable)

ASan-v185

UBSan-v185

MSan-v185

wolfSSL Version Matrix on: pull_request 3

resolve-wolfssl / Resolve wolfSSL version matrix

Resolve wolfSSL version matrix

wolfSSL v5.8.0-stable

wolfSSL v5.9.2-stable

wolfSSL master

WolfTPM Build Tests on: pull_request 54

discover / Resolve wolfSSL version matrix

build (default, make check && WOLFSSL_PATH=./wolfssl ./examples/run_examples.sh, true, true)

build (csharp, true, true, true, true)

build (no-wolfcrypt, --enable-swtpm --disable-wolfcrypt --disable-fwtpm, make check && WOLFSSL_PA...

build (no-wrapper, --enable-swtpm --disable-wrapper --disable-fwtpm, ./examples/native/native_test)

build (no-examples, --enable-swtpm --disable-examples --disable-fwtpm, true)

build (smallstack, --enable-swtpm --enable-smallstack --disable-fwtpm, make check && WOLFSSL_PATH...

build (slb9670, --enable-infineon=slb9670 --disable-fwtpm)

build (slb9672, --enable-infineon=slb9672 --disable-fwtpm)

build (slb9673, --enable-infineon=slb9673 --enable-i2c --disable-fwtpm)

build (certsigncb, --enable-wolftpm --enable-pkcallbacks --enable-certsigncb, --enable-swtpm --en...

build (st33ktpm2, --enable-st33 --disable-fwtpm)

build (st33ktpm2-i2c, --enable-st33 --enable-i2c --disable-fwtpm, true)

build (st33ktpm2 firmware, --enable-st33 --enable-firmware --disable-fwtpm)

build (hal-reset, --enable-st33 --enable-hal-reset --disable-fwtpm, true)

build (spdm-nuvoton, --enable-wolftpm --enable-ecc --enable-sha384 --enable-aesgcm --enable-hkdf ...

build (spdm-smallstack, --enable-wolftpm --enable-ecc --enable-sha384 --enable-aesgcm --enable-hk...

build (spdm-debug, --enable-wolftpm --enable-ecc --enable-sha384 --enable-aesgcm --enable-hkdf --...

build (spdm-nations, --enable-wolftpm --enable-ecc --enable-sha384 --enable-aesgcm --enable-hkdf ...

build (spdm-nations-debug, --enable-wolftpm --enable-ecc --enable-sha384 --enable-aesgcm --enable...

build (spdm-nations-smallstack, --enable-wolftpm --enable-ecc --enable-sha384 --enable-aesgcm --e...

build (microchip, --enable-microchip --disable-fwtpm)

build (nuvoton, --enable-nuvoton --disable-fwtpm)

build (nuvoton-autodisable, --enable-nuvoton, false)

build (nations-autodisable, --enable-nations, false)

build (spi, --enable-spi, false)

build (nuvoton-explicit-swtpm, --enable-swtpm --enable-nuvoton --disable-fwtpm)

build (spdm-nuvoton-autodisable, --enable-wolftpm --enable-ecc --enable-sha384 --enable-aesgcm --...

build (spdm-nations-autodisable, --enable-wolftpm --enable-ecc --enable-sha384 --enable-aesgcm --...

build (nuvoton-explicit-fwtpm, --enable-nuvoton --enable-fwtpm, false)

build (spi-explicit-swtpm, --enable-spi --enable-swtpm --disable-fwtpm)

build (mmio, --enable-mmio --disable-fwtpm, false)

build (devtpm, --enable-devtpm, false, true)

build (config-conflicts, --disable-fwtpm, false, set -e check_conflict() { local flags="$1" exp...

build (tislock, --enable-tislock --disable-fwtpm, false)

build (debug, --enable-debug --disable-fwtpm, false)

build (debug-verbose, --enable-debug=verbose --disable-fwtpm, false)

build (debug-io, --enable-debug=io --disable-fwtpm, -DWOLFTPM_DEBUG_TIMEOUT, false)

build (advio, --enable-advio --disable-fwtpm, false)

build (autodetect, --disable-fwtpm, false)

build (autodetect-debug, --enable-debug --disable-fwtpm, false)

build (pedantic, -Wpedantic, false)

build (no-provisioning, --disable-provisioning --disable-fwtpm, false)

build (swtpm-uart, --enable-swtpm=uart --disable-fwtpm, false)

build (symmetric, --enable-swtpm --disable-fwtpm, -DWOLFTPM_USE_SYMMETRIC, make check && WOLFSSL_...

build (swecdhe, --enable-swtpm --disable-fwtpm, -DWOLFTPM2_USE_SW_ECDHE, make check && WOLFSSL_PA...

build (ecc-default-curve-p384, --enable-swtpm --disable-fwtpm, -DWOLFTPM2_ECC_DEFAULT_CURVE=TPM_E...

build (no-ecc, --enable-wolftpm --disable-ecc, make check && WOLFSSL_PATH=./wolfssl WOLFCRYPT_ECC...

build (no-rsa, --enable-wolftpm --disable-rsa, make check && WOLFSSL_PATH=./wolfssl WOLFCRYPT_RSA...

build (default-configure, -DWOLFSSL_PUBLIC_MP, make check && WOLFSSL_PATH=./wolfssl WOLFCRYPT_DEF...

build (no-filesystem, --enable-wolftpm --disable-filesystem --enable-singlethreaded, make check &...

build (old-wolfssl, --enable-swtpm --disable-fwtpm, make check && WOLFSSL_PATH=./wolfssl NO_PUBAS...

build (v185-pqc-swtpm-build, --enable-wolftpm --enable-pkcallbacks --enable-keygen --enable-dilit...

build (v138-regression-after-v185, --enable-wolftpm --enable-pkcallbacks --enable-keygen, --enabl...

build (default-latest-stable, v5.9.2-stable, make check && WOLFSSL_PATH=./wolfssl ./examples/run_...

Code scanning results

CodeQL

Job log options

Download log archive

This job was skipped

Loading

Add caller-supplied policy authorization for TPM firmware upgrade

Uh oh!

This job was skipped

Re-running jobs...