label pcr0 and enclave hash

jjeangal · jjeangal · commit a3c7a492d387 · 2025-11-27T11:34:48.000-05:00
diff --git a/.github/workflows/build-eif.yml b/.github/workflows/build-eif.yml
@@ -173,5 +173,7 @@ jobs:
             --build-arg NITRO_IMAGE_PATH=${{ env.NITRO_IMAGE }} \
             --build-arg CONFIG_HASH=${{ github.event.inputs.config_hash }} \
             --tag ghcr.io/espressosystems/aws-nitro-poster:${{ env.NITRO_TAG }} \
+            --label build.pcr0=${{ env.PCR0_RAW }} \
+            --label build.enclave_hash=${{ env.ENCLAVE_HASH }} \
             .
           docker push ghcr.io/espressosystems/aws-nitro-poster:${{ env.NITRO_TAG }}

Original file line number	Diff line number	Diff line change
`@@ -173,5 +173,7 @@ jobs:`
`173`	`173`	`--build-arg NITRO_IMAGE_PATH=${{ env.NITRO_IMAGE }} \`
`174`	`174`	`--build-arg CONFIG_HASH=${{ github.event.inputs.config_hash }} \`
`175`	`175`	`--tag ghcr.io/espressosystems/aws-nitro-poster:${{ env.NITRO_TAG }} \`
	`176`	`+ --label build.pcr0=${{ env.PCR0_RAW }} \`
	`177`	`+ --label build.enclave_hash=${{ env.ENCLAVE_HASH }} \`
`176`	`178`	`.`
`177`	`179`	`docker push ghcr.io/espressosystems/aws-nitro-poster:${{ env.NITRO_TAG }}`