build: build-docker.sh: also copy out artifacts from pub/
What the developer wrote
Authored by Martin Milata
build: build-docker.sh: also copy out artifacts from pub/
What changed, and why it matters
This is a build-script fix that ensures additional firmware artifacts from a 'pub/' directory are copied into the build output. It also fixes a typo in an error message. There is no indication this changes runtime behavior, cryptographic checks, or device security.
No security action required; treat as a normal build improvement.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies build-docker.sh to add a cp command copying build-xtask/artifacts/pub/\$item-$TREZOR_MODEL-*.bin into /build/\$item/, with a fallback ‘|| true’ for components where such files do not exist (secmon or kernel). It also corrects a missing ‘$’ in an echo statement (TREZOR_MODEL → $TREZOR_MODEL). The change is purely about build artifact collection.
Changed components
build-docker.shInspect captured patch +2 / −1
diff --git a/build-docker.sh b/build-docker.sh
index 739b4d7b..41612eaf 100755
--- a/build-docker.sh
+++ b/build-docker.sh
@@ -288,12 +288,13 @@ for TREZOR_MODEL in ${MODELS[@]}; do
uv run ../python/tools/firmware-fingerprint.py \
-o build-xtask/artifacts/$TREZOR_MODEL/\$item.bin.fingerprint \
build-xtask/artifacts/$TREZOR_MODEL/\$item.bin \
- || echo "No fingerprint for build-xtask/artifacts/TREZOR_MODEL/\$item.bin"
+ || echo "No fingerprint for build-xtask/artifacts/$TREZOR_MODEL/\$item.bin"
fi
if [ -f build-xtask/artifacts/$TREZOR_MODEL/\$item.bin ]; then
# copy only the artifacts to the build output directory
mkdir /build/\$item/
cp -v build-xtask/artifacts/$TREZOR_MODEL/\$item* /build/\$item/
+ cp -v build-xtask/artifacts/pub/\$item-$TREZOR_MODEL-*.bin /build/\$item/ || true # n/a for secmon or kernel
fi
done
chown -R $USER:$GROUP /build
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.