EBBR.yaml: ignore Hii protocols warnings/failures

See merge request !23

Some device can pass first check of "UEFI Compliant - Hii protocols must
be implemented" but fails the second check (gEfiHiiFontProtocolGuid). We
need to ignore this case.

Signed-off-by: Weizhao Ouyang <weizhao.ouyang@arm.com>

SIE.yaml: add image loading known acs limitation

See merge request !22

SIE.yaml: add auth var unsigned update known acs limitations

See merge request !21

SIE.yaml: ignore TPM compatibility failure

See merge request !20

The ACS is looking for the EFI Image Execution Info Table, which causes failures.
Add a rule in the SIE.yaml config file to mark this failure as known ACS
limitation.

Reported-by: Ryosuke Saito <ryosuke.saito@linaro.org>
Suggested-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Suggested-by: Stuart Yoder <stuart.yoder@arm.com>
Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

The ACS uses very large random blobs to test for unsigned authenticated
variable, which causes failures.

- Introduce a new `KNOWN ACS LIMITATION' category in SIE.yaml.
- Add rules in the SIE.yaml config file to mark those failures as known ACS
  limitations.
- Update the documentation and the schema accordingly.

Reported-by: Sam Moss <sam.moss@arm.com>
Suggested-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Suggested-by: Stuart Yoder <stuart.yoder@arm.com>
Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Add a rule to ignore a failure of the TPM capabilities 1.0 compatibility
test. BBSR does not require it.

Update the common schema accordingly.

Reported-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Suggested-by: Stuart Yoder <stuart.yoder@arm.com>
Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

The checkout and upload-artifact actions v3 we use in our CI are
deprecated; refresh them to v4.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Factorise tests `test set' enum definition into the common schema.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

This gives us validation of the URIs used in our schemas.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Remove the space from the `sub set' common URI, to make it valid.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

The ACS-IR 2.1 sequence files are identical to the ones in the ACS-IR 2.0;
add them for completeness.

- Add the ACS-IR v23.09_2.1.0 sequence files into the contrib folder.
- Update the seq_db.yaml to identify the files from the ACS-IR 2.1.
- Rename the ir2 unit test.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Enable linting for eval used globally and disable tactically in the single
place where we legitimately use it.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Enable some more linting options and modify the parser accordingly.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

The jsonschema and packaging python modules are optional; relax checking
accordingly.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Make the yaml module mandatory for the sake of simplicity.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Remove the deprecated `--schema', `--validate-config' and
`--validate-seq-db' parser arguments.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

The parser can handle the case of git being absent; cope with it in the
unit test, too.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Check our shell unit test.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Remove all the warnings from the disable list, which do not show up with
our scripts.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

No functional change.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Loosen the pattern for classification of one SCT SetState() warning to also
apply when there is a device path.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Mention that this is the main branch of the parser, to be used for IR 2.1
certifications. Also, mention that IR 2.0 certifications should use the
ir2.0 branch, so that development can continue on the main branch.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

- Fix a few pylint warnings.
- Add a `.pylint.rc' file with our pylint settings.
- Add pylint to `make check'.
- Install pylint in the CI.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Add typing annotations to parser.py, which allows us to verify python
scripts with stricter mypy settings by default.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

We need a container with a recent version of Ubuntu to run mypy in strict
mode on validate.py.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Add typing annotations to validate.py and verify it with stricter mypy
settings.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

This is a first attempt at static checking our python scripts, to prepare
adding more type annotations in the future.

- Rework bits to make mypy happy.
- Add a mypy config file to deal with the junit.xml module.
- Check all scripts with mypy in `make check'.
- Mention mypy in the README and in `make help'.
- Add mypy install to the CI files.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

This is similar to what we do on gitlab.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Update the github workflow yaml file to better match what is done on
gitlab.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Mention that gitlab.arm.com is where the latest version is.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Add a CI job to generate the README.pdf.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Add a .gitlab-ci.yml file to run `make check' as CI.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Nhi Pham authored Mar 30, 2023 and Vincent Stehle committed May 24, 2023

Add summary table headings. Also, removing trailing white-space
on the markdown strings.

Signed-off-by: Nhi Pham <nhi@os.amperecomputing.com>

Also, add a unit test.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Describe the convention in comments and adjust existing naming accordingly.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

- Add a unit test with an empty .ekl file.
- Add identification tests.

While at it, refine the naming in the db.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Perform some sanity checks on the tests after loading.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>