What the developer wrote
Authored by odudex
add TZT to action build II
What changed, and why it matters
This commit simply swaps one hardware device target in the project's automated build script. It removes build steps for the 'Bit' device and adds equivalent build steps for a new 'TZT' device. There is no change to the actual Krux software code, no security fix, and no vulnerability introduced.
No security action needed. Treat as routine CI/maintenance update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change is confined to .github/workflows/build.yml. It deletes the GitHub Actions job steps that built firmware for the maixpy_bit device and inserts near-identical steps for maixpy_tzt. The Docker build-push-action, extract action, and artifact upload patterns are unchanged. No source code, dependencies, secrets, permissions, or network settings were modified.
Changed components
.github/workflows/build.ymlInspect captured patch +25 / −25
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4e460b6..597a7e1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -89,30 +89,6 @@ jobs:
path: ${{ steps.extract-amigo.outputs.destination }}
name: build-amigo
- - name: Build for Bit
- if: matrix.device == 'maixpy_bit'
- uses: docker/build-push-action@v6
- with:
- context: .
- build-args: DEVICE=maixpy_bit
- push: true
- tags: localhost:5000/selfcustody/krux-builder-bit:latest
- cache-from: type=local,src=/tmp/.buildx-cache
- cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
- - name: Extract firmware for Bit
- id: extract-bit
- if: matrix.device == 'maixpy_bit'
- uses: shrink/actions-docker-extract@v3
- with:
- image: localhost:5000/selfcustody/krux-builder-bit:latest
- path: /src/firmware/Kboot/build/.
- - name: Upload firmware for Bit
- if: matrix.device == 'maixpy_bit'
- uses: actions/upload-artifact@v4
- with:
- path: ${{ steps.extract-bit.outputs.destination }}
- name: build-bit
-
- name: Build for Dock
if: matrix.device == 'maixpy_dock'
uses: docker/build-push-action@v6
@@ -208,7 +184,31 @@ jobs:
with:
path: ${{ steps.extract-wonder-mv.outputs.destination }}
name: build-wonder-mv
-
+
+ - name: Build for TZT
+ if: matrix.device == 'maixpy_tzt'
+ uses: docker/build-push-action@v6
+ with:
+ context: .
+ build-args: DEVICE=maixpy_tzt
+ push: true
+ tags: localhost:5000/selfcustody/krux-builder-tzt:latest
+ cache-from: type=local,src=/tmp/.buildx-cache
+ cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
+ - name: Extract firmware for TZT
+ id: extract-tzt
+ if: matrix.device == 'maixpy_tzt'
+ uses: shrink/actions-docker-extract@v3
+ with:
+ image: localhost:5000/selfcustody/krux-builder-tzt:latest
+ path: /src/firmware/Kboot/build/.
+ - name: Upload firmware for TZT
+ if: matrix.device == 'maixpy_tzt'
+ uses: actions/upload-artifact@v4
+ with:
+ path: ${{ steps.extract-tzt.outputs.destination }}
+ name: build-tzt
+
- name: Move cache
run: |
rm -rf /tmp/.buildx-cache
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.