When running the new 32b ACS-IR, new HII Database failures are caught.
Triage them automatically after analysis.

While at it, update one comment in the config file to better match the
reality and update the schema.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Add the EBBR sequence files from the ACS-IR v22.10_IR_32b_0.7_BETA-0.
Update the identification database accordingly, mentioning those IR v1.x
config files as deprecated.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

This fixes the case when the path contains spaces.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Make the test for junit output depend on the availability of the junit_xml
python module.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Start factorizing our schemas, now that validate.py supports it.
We start with the obvious guid definition, as a proof of concept.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Enhance the validate.py script to allow referencing other schemas from a
schema, and load the local file with the script.

This will allow us to factorize our schemas.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

We need double quotes for proper multiline strings in YAML.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Reword our asserts to fix the errors reported by flake8, such as the
following:

  ./parser.py:375:11: E275 missing whitespace after keyword

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

This avoids an exception when junit is not installed.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Collect a few meta-data during execution, such as the date, the parser
command line, the sequence file identification and the git commit of the
parser when possible.

We add a new `--print-meta' command line option to display the collected
meta-data.

We output the collected meta-data to the generated files for the following
formats: md, yaml and template.

Also, we gracefully ignore the meta-data when reading back a result.md file
with meta-data.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

We add schemas to validate the generated YAML files contents and use them
in the unit test. The constraints are a bit loose but this is better than
nothing.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

JSON schema definitions are better put in the `$defs' object; fix our
schemas accordingly.

While at it, add `$id' identifiers and bump `$schema' version.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

We borrow the validate.py script from the SystemReady scripts
repository[1] to validate our YAML files against schemas.

We deprecate the `--validate-config' and the `--validate-seq-db'
command line options of the parser.

We adapt the `make check' commands.

[1]: https://gitlab.arm.com/systemready/systemready-scripts



Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Add a shell script to test functionalities of the parser and run it from
`make check'.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Sequence files

See merge request !16

Add constraints to the schemas to strengthen validation even more where
possible.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Issue a deprecation warning when we detect a deprecated sequence file being
used.

We cannot deprecate ACS IR v1.0 sequence file as it is identical to the ACS
IR v2.0 BET-0 one.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

This is the same sequence file as ACS-IR v1.0 but we capture it for
completeness. Update the identification database accordingly.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Remove seq files

See merge request !15

The ACS build scripts use the sequence files from the bbr-acs repository.
Remove the unused EBBR and SBBR sequence files from the parser repository
to avoid confusion.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Fix a bug when using junit output

See merge request !14

Correct the name of the module being looked for in the assert at the
beginning of the junit output function.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Add an SIE configuration

See merge request !12

Added support for outputing results in junit format

See merge request !13

Add a configuration to process SCT results from the Security Interface
Extension ACS.

The rules in this new configuration can override tests results with a new
`KNOWN RPMB LIMITATION' result.

Add the necessary enums to our schema and adjust the sequence files
database to use the new configuration automatically when the SIE ACS is
detected.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Drew Reed authored Jul 23, 2021 and Drew Reed committed Jul 14, 2022

Added new --junit command line option to instruct the script to output
the results in junit format for easy inclusion in CI systems

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

No functional change.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Let's make sure our sample is correct.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

For the moment we have only the EBBR.yaml configuration. Command line does
still take precedence. No functional change.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

We add a schema and a `--validate-seq-db' command line option to validate
our sequence files database, now that it is in YAML format.
We call the validation from `make check'.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Let's use YAML as much as we can as we can better validate it and extend
it.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

To prepare for adding more validation schemas, create a dedicated folder
for our schemas.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

The SCT in the ACS-IR 2.0 Alpha has been updated; add some rules to triage
the results accordingly in preparation of IR 2.0.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

IR 1.1 certifications should use the ir1 branch so that development can
continue on the main branch.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

Deal with empty config gracefully. This allows to pass e.g. /dev/null as
config without crashing the parser.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

schema + BBSR seq file

See merge request !11

Add the BBSR sequence file from the Security interface extension ACS
v21.10_SIE_REL1.0.

While at it, fix sequence files permissions.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>

We know all the valid values for many fields of the configuration rules.
Refine the schema to constrain the EBBR.yaml config file a bit more.

This means we are giving up the ability to mention only a sub-string for
those fields in the config file, which we were not doing anyway.

Also, forbid additional properties where we can.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>