Skip to content

Enclave EIF — Build #89 (61cc5f5)

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Jul 16:42
enclave-build-89
61cc5f5

PCR0: 0d336e7d1147f9082e98259fbb48e718598c61b4c012ef9f653695beec04c2578a07b6315bd8bd216a1879c5bc072813
Commit: 61cc5f5
nitro-cli: Nitro CLI 1.4.4
Built at: 2026-07-09T16:42:21Z

🇹🇷 Bu release nedir + nasıl doğrulanır

Bu release reproducible build pipeline'ından üretildi: aynı commit'ten her build aynı PCR0'ı verir (workflow içinde cache-kapalı iki kez derlenerek doğrulanır). PCR0, enclave imajının kriptografik parmak izidir.

Dosyalar:

  • enclave.eif — Nitro Enclave Image File (EC2 Graviton'a yüklenir)
  • pcr0.txt — Beklenen attestation PCR0 değeri (hex)
  • expected_pcr.json — Build metadata (PCR0, commit, nitro-cli sürümü, build zamanı)
  • nitro_cli_version.txt — Kullanılan nitro-cli sürümü

Doğrulama: (1) Kaynak açık + build yeniden-üretilebilir — repo'yu bu commit'te klonlayıp aynı iş akışını (ya da kendi Nitro ortamında nitro-cli build-enclave) çalıştırarak yukarıdaki PCR0'a ulaştığınızı teyit edebilirsiniz. (2) Canlı enclave kriptografik olarak zorlanır — mobil uygulama her handshake'te AWS Nitro attestation belgesini doğrular, PCR0'ı imzalı izin listesiyle karşılaştırır; uyuşmazsa reddeder. Ayrıntı: README.

🇬🇧 What this release is + how to verify

This release was produced by the reproducible build pipeline: every build from the same commit yields the same PCR0 (verified by building twice with cache disabled inside the workflow). PCR0 is the cryptographic fingerprint of the enclave image.

Files:

  • enclave.eif — Nitro Enclave Image File (loaded on EC2 Graviton)
  • pcr0.txt — Expected attestation PCR0 (hex)
  • expected_pcr.json — Build metadata (PCR0, commit, nitro-cli version, build time)
  • nitro_cli_version.txt — The nitro-cli version used

Verify: (1) Source is public + build is reproducible — clone the repo at this commit and re-run the same workflow (or nitro-cli build-enclave in your own Nitro environment) to confirm you reach the PCR0 above. (2) The live enclave is cryptographically enforced — on every handshake the mobile app verifies the AWS Nitro attestation document and compares PCR0 against a signed allow-list, rejecting any mismatch. Details: README.

Assets 6
Loading