Skip to content

Commit 0e5c392

Browse files
authored
[V-GUARD] Implement finalization_hasher.py integration
Signed-off-by: vocoder-na <vcode.initiative@outlook.com>
1 parent 3e5d7e1 commit 0e5c392

File tree

1 file changed

+45
-0
lines changed

1 file changed

+45
-0
lines changed
Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
# KERNEL-ПРОТОКОЛ: V-СТРАЖ
2+
# Захист від Атаки TOCTOU (Time-of-Check to Time-of-Use)
3+
name: V-Guard Integrity Check
4+
5+
on:
6+
pull_request:
7+
branches: [ main ]
8+
types: [ opened, synchronize, reopened ]
9+
10+
jobs:
11+
check_attestation:
12+
runs-on: ubuntu-latest
13+
steps:
14+
- uses: actions/checkout@v4
15+
with:
16+
fetch-depth: 0
17+
- name: Setup Python
18+
uses: actions/setup-python@v5
19+
with:
20+
python-version: '3.x'
21+
22+
- name: 1. Calculate Finalization Hash (TOCTOU Defense)
23+
id: finalization_hash
24+
run: |
25+
# Виклик Python-скрипта для обчислення Фіналізаційного Хешу
26+
HASH_RESULT=$(python tools/finalization_hasher.py)
27+
28+
echo "V-Guard: Фіналізаційний хеш обчислено."
29+
30+
# Передаємо хеш як вивід кроку
31+
echo "hash=$HASH_RESULT" >> $GITHUB_OUTPUT
32+
33+
- name: 2. V-Guard Decision
34+
run: |
35+
FINAL_HASH="${{ steps.finalization_hash.outputs.hash }}"
36+
37+
echo "--- V-GUARD REPORT ---"
38+
39+
# Якщо хеш присутній, V-Страж готовий підтвердити цілісність
40+
if [ -z "$FINAL_HASH" ]; then
41+
echo "V-Guard: TOCTOU Defense FAILED - Final Hash missing."
42+
exit 1
43+
else
44+
echo "V-Guard: TOCTOU Defense PASSED. Final hash computed."
45+
fi

0 commit comments

Comments
 (0)