build-and-sign-eif.yaml

---
name: Build and sign EIF
on:
  push:
    branches:
      - main
    paths:
      - ".github/workflows/**"
      - "enclave/**"

permissions:
  contents: write
  packages: write
  id-token: write
  attestations: write

jobs:
  build_and_sign_eif:
    name: Build and sign EIF
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository code
        uses: actions/checkout@v4

      - name: Build EIF
        id: build-eif
        uses: richardfan1126/nitro-enclaves-eif-build-action@beta-github-attest
        with:
          docker-build-context-path: enclave
          enable-ghcr-push: true
          enable-artifact-sign: true
          enable-github-attest: true
          eif-file-name: enclave.eif
          eif-info-file-name: enclave-info.json
          artifact-tag: ${{ github.sha }}
          save-pcrs-in-annotation: true