Create build@sha256:75b75eab447ebcca1f471c98583d9b5d82c4be122c470852a…

.devcontainer/projectserum/build@sha256:75b75eab447ebcca1f471c98583d9b5d82c4be122c470852a022afcf9c98bead

@@ -0,0 +1,4 @@
+{
+  "image": "mcr.microsoft.com/devcontainers/universal:2",
+  "features": {}
+}

.github/workflows/build.yml

@@ -27,23 +27,18 @@ jobs:
       matrix:
         name: [
             linux,
-            windows,
             macos
         ]
 
         include:
           - name: linux
             os: ubuntu-latest
-            artifact_path: target/release/verifier-cli
-            asset_name: verifier-cli-linux
-          - name: windows
-            os: windows-latest
-            artifact_path: target/release/verifier-cli.exe
-            asset_name: verifier-cli-windows
+            artifact_path: target/release/solana-verify
+            asset_name: solana-verify-linux
           - name: macos
             os: macos-latest
-            artifact_path: target/release/verifier-cli
-            asset_name: verifier-cli-macos
+            artifact_path: target/release/solana-verify
+            asset_name: solana-verify-macos
     steps:
       - name: Checkout code
         uses: actions/checkout@v1
@@ -60,13 +55,13 @@ jobs:
       - name: Rename executable based on OS
         env:
           ASSET_NAME: ${{matrix.asset_name}}
-          EXEC_PATH: $${{matrix.artifact_path}}
+          EXEC_PATH: ${{matrix.artifact_path}}
         run: | 
-        echo "asset name: $ASSET_NAME executable path: $EXEC_PATH"
-        mv EXEC_PATH $ASSET_NAME
+          echo "asset name: ${ASSET_NAME} executable path: ${EXEC_PATH}"
+          mv ${EXEC_PATH} ${ASSET_NAME}
 
       - name: Upload binaries to release
         uses: softprops/action-gh-release@v1
         with:
-          files: $ASSET_NAME
+          files: ${{matrix.asset_name}}
           fail_on_unmatched_files: true

.github/workflows/generate_dockerfiles.yml

@@ -0,0 +1,56 @@
+name: Generate Dockerfiles
+
+on:
+    workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  generate-dockerfiles:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/create-github-app-token@v1
+        id: generate-token
+        with:
+          app-id: ${{ vars.ROBO_PR_APP_ID }}
+          private-key: ${{ secrets.ROBO_PR_CLIENT_SECRET }}
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
+        with:
+          enable-cache: true
+          cache-dependency-glob: "uv.lock"
+
+      - name: "Set up Python"
+        uses: actions/setup-python@v5
+        with:
+          python-version-file: "pyproject.toml"
+
+      - name: Install dependencies with uv
+        run: |
+          uv sync --all-extras --dev
+
+      - name: Run generate_dockerfiles.py
+        run: uv run generate_dockerfiles.py
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v5
+        with:
+          token: ${{ steps.generate-token.outputs.token }}
+          commit-message: Update Dockerfiles
+          title: 'Update Dockerfiles'
+          body: |
+            This PR updates the Dockerfiles in the `docker/` directory.
+
+            Generated automatically by the Generate Dockerfiles workflow.
+          branch: autopr-update-dockerfiles
+          delete-branch: true
+          base: master
+          labels: |
+            automated pr
+            dockerfiles

.github/workflows/publish_all_dockerfiles.yaml

@@ -0,0 +1,88 @@
+name: Publish All Changed Images
+
+on:
+  workflow_dispatch:
+    inputs:
+      commit_hash:
+        description: 'Commit hash to compare from'
+        required: true
+        type: string
+
+
+jobs:
+  detect_changes:
+    runs-on: ubuntu-latest
+    outputs:
+      versions: ${{ steps.set-matrix.outputs.versions }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - id: set-matrix
+        run: |
+          CHANGED_FILES=$(git diff --name-only --diff-filter=d ${{ github.event.inputs.commit_hash }} ${{ github.sha }} | grep '^docker/v.*\.Dockerfile$' || true)
+          echo "CHANGED_FILE=$CHANGED_FILES"
+          if [ -n "$CHANGED_FILES" ]; then
+            echo "$(echo "$CHANGED_FILES" | jq -R -s 'split("\n") | map(select(length > 0)) | map(.[8:-11])' | tr -d '[:space:]')"
+            echo "versions=$(echo "$CHANGED_FILES" | jq -R -s 'split("\n") | map(select(length > 0)) | map(.[8:-11])' | tr -d '[:space:]')" >> $GITHUB_OUTPUT
+          else
+            echo "versions=[]" >> $GITHUB_OUTPUT
+          fi
+          echo $GITHUB_OUTPUT
+      - name: Display matrix
+        run: echo "${{ steps.set-matrix.outputs.versions }}"
+
+  push_to_registries:
+    needs: detect_changes
+    if: ${{ needs.detect_changes.outputs.versions != '[]' }}
+    strategy:
+      matrix: 
+        version: ${{ fromJson(needs.detect_changes.outputs.versions )}}
+    name: Push Docker images to docker.io
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
+      attestations: write
+      id-token: write
+    steps:
+      - name: Report version
+        run: echo "Pushing Docker image for version ${{ matrix.version }}"
+
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        with:
+          registry: docker.io
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
+        with:
+          images: |
+             docker.io/solanafoundation/solana-verifiable-build
+
+      - name: Build and push Docker images
+        id: push
+        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
+        with:
+          context: docker/
+          file: docker/v${{ matrix.version }}.Dockerfile
+          push: true
+          tags: |
+            ${{ steps.meta.outputs.tags }}
+            docker.io/solanafoundation/solana-verifiable-build:${{ matrix.version }}
+          labels: |
+            ${{ steps.meta.outputs.labels }}
+            org.opencontainers.image.source=https://github.com/${{ github.repository }}
+
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: index.docker.io/solanafoundation/solana-verifiable-build
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true

.github/workflows/publish_dockerfile.yaml

@@ -0,0 +1,57 @@
+name: Publish Docker Image
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Solana version to generate Dockerfile for (e.g., 1.16.0)'
+        required: true
+        type: string
+
+jobs:
+  push_to_registries:
+    name: Push Docker image to ghcr.io
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
+      attestations: write
+      id-token: write
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        with:
+          registry: docker.io
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
+        with:
+          images: |
+            docker.io/solanafoundation/solana-verifiable-build
+
+      - name: Build and push Docker images
+        id: push
+        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
+        with:
+          context: docker/
+          file: docker/v${{ github.event.inputs.version }}.Dockerfile
+          push: true
+          tags: |
+            ${{ steps.meta.outputs.tags }}
+            docker.io/solanafoundation/solana-verifiable-build:${{ github.event.inputs.version }}
+          labels: |
+            ${{ steps.meta.outputs.labels }}
+            org.opencontainers.image.source=https://github.com/${{ github.repository }}
+
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: index.docker.io/solanafoundation/solana-verifiable-build
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true

.github/workflows/test.yaml

@@ -0,0 +1,39 @@
+name: Run Integration Tests
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+  workflow_dispatch:
+
+jobs:
+  test:
+    name: Run Tests
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false # Continue with other tests even if one fails
+      matrix:
+        test_name:
+          - test_phoenix_v1
+          - test_squads_v3
+          - test_drift_v2
+          - test_marginfi_v2
+          - test_local_example
+          - test_verify_from_image
+          - test_games_preset
+          - test_agave_2_1
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache dependencies
+        uses: Swatinem/rust-cache@v2
+
+      - name: Build
+        run: cargo build
+
+      - name: Run ${{ matrix.test_name }}
+        run: cargo test ${{ matrix.test_name }} -- --nocapture

.github/workflows/update_whitelist.yaml

@@ -0,0 +1,61 @@
+name: Update Docker Image Whitelist
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - master
+    paths:
+      - 'docker/**'
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update-docker-image-whitelist:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/create-github-app-token@v1
+        id: generate-token
+        with:
+          app-id: ${{ vars.ROBO_PR_APP_ID }}
+          private-key: ${{ secrets.ROBO_PR_CLIENT_SECRET }}
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v3
+        with:
+          enable-cache: true
+          cache-dependency-glob: "uv.lock"
+
+      - name: "Set up Python"
+        uses: actions/setup-python@v5
+        with:
+          python-version-file: "pyproject.toml"
+
+      - name: Install dependencies with uv
+        run: |
+          uv sync --all-extras --dev
+
+      - name: Run generate_dockerfiles.py
+        run: uv run update_image_whitelist.py
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v5
+        with:
+          token: ${{ steps.generate-token.outputs.token }}
+          commit-message: Update image whitelist
+          title: 'Update Image Whitelist'
+          body: |
+            This PR updates `image_config.rs` with the latest published Docker image tags.
+
+            Generated automatically by the Update Docker Image Whitelist workflow.
+          branch: autopr-update-image-whitelist
+          delete-branch: true
+          base: master
+          labels: |
+            automated pr
+            image whitelist

.gitignore

@@ -1 +1,2 @@
 **/target
+.DS_Store