From debe61430b8db7534a1b8f1124880e9e8b119ba9 Mon Sep 17 00:00:00 2001
From: Hanno Becker <beckphan@amazon.co.uk>
Date: Mon, 23 Sep 2024 07:39:18 +0100
Subject: [PATCH] Run CBMC on EC2 runner in CI

Signed-off-by: Hanno Becker <beckphan@amazon.co.uk>
---
 .github/workflows/ci.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5d0775fb..7903bc05 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,7 @@ on:
     branches: ["*"]
   pull_request:
     branches: ["main"]
+    types: [ "labeled" ]
 jobs:
   build_kat:
     strategy:
@@ -96,17 +97,26 @@ jobs:
           - name: AMD EPYC 4th gen (t3a)
             ec2_instance_type: t3a.small
             ec2_ami: ubuntu-latest (x86_64)
+            cbmc: 'false'
           - name: Intel Xeon 4th gen (t3)
             ec2_instance_type: t3.small
             ec2_ami: ubuntu-latest (x86_64)
+            cbmc: 'false'
+          - name: Graviton3, CBMC (c7g.4xlarge)
+            ec2_instance_type: c7g.4xlarge
+            ec2_ami: ubuntu-latest (custom AMI)
+            ec2_ami_id: ami-08ddb0acd99dc3d33
+            cbmc: 'true'
     name: ${{ matrix.target.name }}
     permissions:
       contents: 'read'
       id-token: 'write'
     uses: ./.github/workflows/ci_ec2_reusable.yml
-    if: github.repository_owner == 'pq-code-package' || github.ref == 'refs/heads/main'
+    if: github.repository_owner == 'pq-code-package' && (github.event.label.name == 'ci' || github.ref == 'refs/heads/main')
     with:
       name: ${{ matrix.target.name }}
       ec2_instance_type: ${{ matrix.target.ec2_instance_type }}
       ec2_ami: ${{ matrix.target.ec2_ami }}
+      ec2_ami_id: ${{ matrix.target.ec2_ami_id }}
+      cbmc: ${{ matrix.target.cbmc == 'true' }}
     secrets: inherit