Publish attested release binaries with provenance and SBOMs

.github/workflows/format.yml

@@ -229,3 +229,25 @@ jobs:
 
       - name: Test proposal scripts
         run: scripts/docs-proposal/test.sh
+
+  release-scripts:
+    name: release scripts
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Retrieve Node.js version
+        id: node-version
+        run: echo "node-version=$(grep '^nodejs ' .tool-versions | awk '{print $2}')" >> "$GITHUB_OUTPUT"
+        shell: bash
+
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ steps.node-version.outputs.node-version }}
+
+      - name: Run shellcheck
+        run: shellcheck scripts/release/phase1-build.sh
+
+      - name: Test release producer scripts
+        run: node --test scripts/release/phase1.test.mjs

.github/workflows/release-build.yml

@@ -0,0 +1,197 @@
+name: Release build and signing
+on:
+  workflow_call:
+permissions:
+  contents: read
+jobs:
+  checks:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+    steps:
+      # Full history, so the branch check below can see every branch.
+      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - name: Read pinned Node version
+        id: tools
+        run: echo "node=$(awk '$1 == "nodejs" { print $2 }' .tool-versions)" >> "$GITHUB_OUTPUT"
+      - uses: actions/setup-node@v5
+        with:
+          node-version: ${{ steps.tools.outputs.node }}
+      - run: node --test scripts/release/phase1.test.mjs
+      # Refuse a tag the publisher would reject before building and signing.
+      - name: Refuse non-SemVer release tags
+        if: startsWith(github.ref, 'refs/tags/')
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          node --input-type=module -e "
+          import { isReleaseTag } from './scripts/release/publish.mjs'
+          if (!isReleaseTag(process.env.RELEASE_TAG)) throw Error('Release tags must be vMAJOR.MINOR.PATCH[-PRERELEASE]')
+          "
+      # The publisher requires a lightweight tag at the built commit. Refuse an
+      # annotated tag here, before signing writes public attestations for it.
+      - name: Refuse annotated release tags
+        if: startsWith(github.ref, 'refs/tags/')
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          ref="$(gh api "repos/$GITHUB_REPOSITORY/git/ref/tags/$RELEASE_TAG" --jq '.object.type + " " + .object.sha')"
+          if [ "$ref" != "commit $GITHUB_SHA" ]; then
+            echo "::error::Release tags must be lightweight tags at $GITHUB_SHA; found $ref"
+            exit 1
+          fi
+      # Draft creation failed with HTTP 403 in rehearsals when the tagged commit
+      # was on no branch. Refuse that before building and signing. Which
+      # branches may be released stays a maintainer decision.
+      - name: Refuse tags on commits outside every branch
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          branches="$(git branch -r --contains "$GITHUB_SHA")"
+          if [ -z "$branches" ]; then
+            echo "::error::Push $GITHUB_SHA to a branch before tagging it"
+            exit 1
+          fi
+          printf 'Tagged commit is on:\n%s\n' "$branches"
+  build:
+    needs: checks
+    name: Build ${{ matrix.asset }}
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 90
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-24.04
+            package: trusted-server-adapter-fastly
+            target: wasm32-wasip1
+            asset: trusted-server-fastly.wasm
+          - os: ubuntu-24.04
+            package: trusted-server-cli
+            target: x86_64-unknown-linux-gnu
+            asset: ts-x86_64-unknown-linux-gnu
+          - os: macos-15
+            package: trusted-server-cli
+            target: aarch64-apple-darwin
+            asset: ts-aarch64-apple-darwin
+          - os: macos-15-intel
+            package: trusted-server-cli
+            target: x86_64-apple-darwin
+            asset: ts-x86_64-apple-darwin
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+      - name: Read pinned toolchains
+        id: tools
+        shell: bash
+        run: |
+          set -euo pipefail
+          echo "node=$(awk '$1 == "nodejs" { print $2 }' .tool-versions)" >> "$GITHUB_OUTPUT"
+          echo "rust=$(sed -n 's/^channel = "\([^"]*\)"/\1/p' rust-toolchain.toml)" >> "$GITHUB_OUTPUT"
+      - uses: actions/setup-node@v5
+        with:
+          node-version: ${{ steps.tools.outputs.node }}
+      - name: Install the pinned Rust toolchain without build caches
+        env:
+          RUST_VERSION: ${{ steps.tools.outputs.rust }}
+          BUILD_TARGET: ${{ matrix.target }}
+        run: rustup toolchain install "$RUST_VERSION" --profile minimal --target "$BUILD_TARGET"
+      - name: Build and generate the build inventory in a clean environment
+        shell: bash
+        env:
+          BUILD_PACKAGE: ${{ matrix.package }}
+          BUILD_TARGET: ${{ matrix.target }}
+          RELEASE_ASSET: ${{ matrix.asset }}
+          SOURCE_COMMIT: ${{ github.sha }}
+        run: |
+          set -euo pipefail
+          env -i PATH="$PATH" HOME="$HOME" \
+            CARGO_HOME="${CARGO_HOME:-$HOME/.cargo}" \
+            RUSTUP_HOME="${RUSTUP_HOME:-$HOME/.rustup}" \
+            TMPDIR="${TMPDIR:-/tmp}" RUNNER_TEMP="$RUNNER_TEMP" \
+            SOURCE_COMMIT="$SOURCE_COMMIT" \
+            bash scripts/release/phase1-build.sh "$BUILD_PACKAGE" "$BUILD_TARGET" "$RELEASE_ASSET"
+      # Only the tag-triggered signing job reads these; a main push is a build
+      # and smoke check.
+      - uses: actions/upload-artifact@v6
+        if: startsWith(github.ref, 'refs/tags/v')
+        with:
+          name: release-${{ matrix.asset }}
+          path: release-assets/*
+          if-no-files-found: error
+          retention-days: 7
+
+  sign:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && vars.RELEASE_PUBLICATION_ENABLED == 'true'
+    needs: build
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
+    permissions:
+      contents: read
+      id-token: write
+      attestations: write
+    strategy:
+      fail-fast: false
+      matrix:
+        asset:
+          [
+            trusted-server-fastly.wasm,
+            ts-aarch64-apple-darwin,
+            ts-x86_64-apple-darwin,
+            ts-x86_64-unknown-linux-gnu,
+          ]
+    steps:
+      # Only fixed inline checks execute here; never checkout or execute build inputs.
+      - uses: actions/download-artifact@v7
+        with:
+          name: release-${{ matrix.asset }}
+          path: release-assets
+      - name: Validate signing inputs and retain their digests
+        env:
+          ASSET: ${{ matrix.asset }}
+        run: |
+          set -euo pipefail
+          cd release-assets
+          test "$(find . -mindepth 1 -maxdepth 1 | wc -l)" -eq 2
+          for file in "$ASSET" "$ASSET.spdx.json"; do test -f "$file" && test ! -L "$file" && test -s "$file" || exit 1; done
+          sha256sum "$ASSET" "$ASSET.spdx.json" > ../inputs.sha256
+      - name: Attest SLSA build provenance
+        id: provenance
+        uses: actions/attest@v4
+        with:
+          subject-path: |
+            release-assets/${{ matrix.asset }}
+            release-assets/${{ matrix.asset }}.spdx.json
+      - name: Attest the binary's SPDX SBOM
+        id: sbom
+        uses: actions/attest@v4
+        with:
+          subject-path: release-assets/${{ matrix.asset }}
+          sbom-path: release-assets/${{ matrix.asset }}.spdx.json
+      - name: Retain only this run's real bundles and signed-input digests
+        env:
+          ASSET: ${{ matrix.asset }}
+          PROVENANCE: ${{ steps.provenance.outputs.bundle-path }}
+          SBOM: ${{ steps.sbom.outputs.bundle-path }}
+        run: |
+          set -euo pipefail
+          (cd release-assets && sha256sum --check ../inputs.sha256)
+          test -s "$PROVENANCE"
+          test -s "$SBOM"
+          mkdir signed-assets
+          cp "$PROVENANCE" "signed-assets/$ASSET.provenance.sigstore.json"
+          cp "$SBOM" "signed-assets/$ASSET.sbom.sigstore.json"
+          cp inputs.sha256 signed-assets/SHA256SUMS
+          (cd signed-assets && sha256sum "$ASSET.provenance.sigstore.json" "$ASSET.sbom.sigstore.json" >> SHA256SUMS)
+      - uses: actions/upload-artifact@v6
+        with:
+          name: signed-${{ matrix.asset }}
+          path: signed-assets/*
+          if-no-files-found: error
+          retention-days: 7

.github/workflows/release.yml

@@ -0,0 +1,104 @@
+name: Binary attestations
+# Pull requests run the release Node suite in format.yml. The release builds
+# run on every push to main, so they need no input path list, and on tags.
+on:
+  push:
+    branches: [main]
+    tags: ['v*']
+permissions:
+  contents: read
+concurrency:
+  group: binary-attestations-${{ github.ref }}
+  cancel-in-progress: false
+jobs:
+  build:
+    uses: ./.github/workflows/release-build.yml
+    permissions:
+      contents: read
+      id-token: write
+      attestations: write
+  release:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && vars.RELEASE_PUBLICATION_ENABLED == 'true'
+    needs: build
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@v7
+        with:
+          name: release-trusted-server-fastly.wasm
+          path: build/trusted-server-fastly.wasm
+      - uses: actions/download-artifact@v7
+        with:
+          name: signed-trusted-server-fastly.wasm
+          path: signed/trusted-server-fastly.wasm
+      - uses: actions/download-artifact@v7
+        with:
+          name: release-ts-aarch64-apple-darwin
+          path: build/ts-aarch64-apple-darwin
+      - uses: actions/download-artifact@v7
+        with:
+          name: signed-ts-aarch64-apple-darwin
+          path: signed/ts-aarch64-apple-darwin
+      - uses: actions/download-artifact@v7
+        with:
+          name: release-ts-x86_64-apple-darwin
+          path: build/ts-x86_64-apple-darwin
+      - uses: actions/download-artifact@v7
+        with:
+          name: signed-ts-x86_64-apple-darwin
+          path: signed/ts-x86_64-apple-darwin
+      - uses: actions/download-artifact@v7
+        with:
+          name: release-ts-x86_64-unknown-linux-gnu
+          path: build/ts-x86_64-unknown-linux-gnu
+      - uses: actions/download-artifact@v7
+        with:
+          name: signed-ts-x86_64-unknown-linux-gnu
+          path: signed/ts-x86_64-unknown-linux-gnu
+      # Run only the publisher and its notes template from the tagged commit;
+      # never check out build inputs here.
+      - uses: actions/checkout@v5
+        with:
+          path: publisher
+          persist-credentials: false
+          sparse-checkout: |
+            .tool-versions
+            scripts/release/publish.mjs
+            scripts/release/release-notes.md
+          sparse-checkout-cone-mode: false
+      - name: Read pinned Node version
+        id: tools
+        run: echo "node=$(awk '$1 == "nodejs" { print $2 }' publisher/.tool-versions)" >> "$GITHUB_OUTPUT"
+      - uses: actions/setup-node@v5
+        with:
+          node-version: ${{ steps.tools.outputs.node }}
+      - name: Install the pinned GitHub CLI
+        env:
+          GH_VERSION: 2.102.0
+          GH_SHA256: bb766f710eef8ede859c18578c72c327597cd4c8a85b06001b1f3843c6019386
+        run: |
+          set -euo pipefail
+          archive="gh_${GH_VERSION}_linux_amd64.tar.gz"
+          curl --fail --silent --show-error --location --retry 3 \
+            "https://github.com/cli/cli/releases/download/v${GH_VERSION}/${archive}" \
+            --output "$RUNNER_TEMP/$archive"
+          printf '%s  %s\n' "$GH_SHA256" "$RUNNER_TEMP/$archive" | sha256sum --check
+          tar -xzf "$RUNNER_TEMP/$archive" -C "$RUNNER_TEMP"
+          echo "$RUNNER_TEMP/gh_${GH_VERSION}_linux_amd64/bin" >> "$GITHUB_PATH"
+      - name: Verify handoff, create once, publish by release ID and verify
+        env:
+          GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
+          RELEASE_TAG: ${{ github.ref_name }}
+          SOURCE_COMMIT: ${{ github.sha }}
+          RELEASE_PUBLICATION_ENABLED: ${{ vars.RELEASE_PUBLICATION_ENABLED }}
+          NODE_VERSION: ${{ steps.tools.outputs.node }}
+        run: |
+          set -euo pipefail
+          test "$(gh --version | head -1 | cut -d' ' -f3)" = 2.102.0
+          # publish.mjs runs only where import.meta.main exists; an older Node
+          # would exit 0 without publishing.
+          test "$(node --version)" = "v$NODE_VERSION"
+          node publisher/scripts/release/publish.mjs

.github/workflows/test.yml

@@ -361,6 +361,34 @@ jobs:
         run: |
           cargo test --manifest-path crates/trusted-server-cli/Cargo.toml --target "$(rustc -vV | sed -n 's/host: //p')"
 
+      # Release builds take their facts from these inputs; check that the
+      # actual CLI binary embeds them unchanged. The fictional commit differs
+      # from the checkout, so a fallback to local git cannot pass.
+      - name: cargo test (release build facts)
+        if: runner.os == 'Linux'
+        env:
+          TRUSTED_SERVER__RELEASE_BUILD: "1"
+          TRUSTED_SERVER__GIT_VERSION: abcdef0123456789abcdef0123456789abcdef01
+        run: |
+          cargo test --manifest-path crates/trusted-server-cli/Cargo.toml --target "$(rustc -vV | sed -n 's/host: //p')" --test release_build_facts
+
+      # A valid commit also passes when the release gate is bypassed, so check
+      # that core's build script refuses a branch name in release mode.
+      - name: cargo check (release build refuses a branch source)
+        if: runner.os == 'Linux'
+        env:
+          TRUSTED_SERVER__RELEASE_BUILD: "1"
+          TRUSTED_SERVER__GIT_VERSION: main
+        run: |
+          if cargo check --manifest-path crates/trusted-server-cli/Cargo.toml --target "$(rustc -vV | sed -n 's/host: //p')" 2> "$RUNNER_TEMP/release-refusal.log"; then
+            echo "release build accepted a branch source" >&2
+            exit 1
+          fi
+          if ! grep -F 'release source must be exactly 40 lowercase ASCII hexadecimal bytes' "$RUNNER_TEMP/release-refusal.log"; then
+            cat "$RUNNER_TEMP/release-refusal.log" >&2
+            exit 1
+          fi
+
       - name: cargo test (browser fixtures)
         if: runner.os == 'macOS'
         run: ./scripts/test-cli.sh

AGENTS.md

@@ -377,6 +377,7 @@ Every PR must pass:
 13. CI Node pin guard: `node --test scripts/check-ci-node-pin.test.mjs && node scripts/check-ci-node-pin.mjs` with the `.tool-versions` Node (every CI job that compiles Rust sets up the `.tool-versions` Node before its first cargo step)
 14. Fastly absolute-deadline network fixtures under Viceroy (the harness builds the adapter test binary itself): `node crates/trusted-server-adapter-fastly/tests/deadline-origin.mjs "$(command -v viceroy)"`
 15. Worker auction-deadline runtime fixtures (`worker-auction-deadlines.yml`): build and lint the runtime fixture, then run it under the local runtime. For Cloudflare, `cargo build --locked -p trusted-server-adapter-cloudflare --example deadline-runtime --target wasm32-unknown-unknown --features cloudflare` and `node scripts/test-worker-auction-deadlines.mjs cloudflare --runtime "$(command -v wrangler)"` (requires wrangler and the `Cargo.lock` wasm-bindgen CLI). For Spin, `cargo build --locked -p trusted-server-adapter-spin --example deadline-runtime --target wasm32-wasip1 --features spin` and `node scripts/test-worker-auction-deadlines.mjs spin --runtime "$(command -v spin)"`. CI lints each fixture with the same `cargo clippy` arguments plus `-- -D warnings`
+16. Release producer checks: `node --test scripts/release/phase1.test.mjs && shellcheck scripts/release/phase1-build.sh`
 
 CI also runs these HTML EOF checks. Run them locally only when changing EOF
 finalization, publisher or HTML-processor code:

CHANGELOG.md

@@ -7,8 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add Phase 1 attested release binaries: the Fastly wasm and the `ts` CLI for Linux x86-64 and macOS (ARM64 and x86-64), with SPDX 2.3 inventories, provenance/SBOM bundles, immutable verification and a GNU glibc 2.34 startup check. Reproducibility, other adapters and the custom verifier remain later work; production publication requires maintainer settings.
+
 ### Changed
 
+- The attested Fastly wasm reports `x-ts-version` as the full 40-character source commit; deploy-pipeline builds keep the tag, branch or short-commit value described below.
+- **Breaking:** `ts --version` now prints `ts package=<version> source=<source> target=<triple> variant=default` instead of `ts <version>`. `source` is the full commit in attested release binaries, and otherwise the development ref, short commit or `unknown`. Update scripts that parse the old output.
 - The Lockr browser module no longer polls for private SDK state or mutates its API host, removing the "Lockr SDK not detected" timeout warning (#1247). Root-relative Lockr XHR API requests and rewritten SDK URLs now stay on the page origin even with an external `<base href>`. Custom or unreplaced legacy SDKs that relied on the removed host rewrite must route their own API calls through `/integrations/lockr/api`; `rewrite_sdk = false` leaves static SDK tags unchanged but does not disable dynamic interception. See the [Lockr migration guide](docs/guide/integrations/lockr.md#migration-from-the-sdk-host-shim).
 - Auction response collection now bounds network waiting by `[auction].timeout_ms`
   measured from dispatch, including delayed headers and trickling bodies on all