What the developer wrote
Authored by Roman Zeyde
ci(core): collect FW binaries' sizes
[no changelog]
What changed, and why it matters
This commit adds a new automated CI job that reports the sizes of built firmware binary files. It does not change any firmware code, crypto logic, or device behavior. There is no security-relevant change.
No action required. This is a benign CI observability addition.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch introduces a GitHub Actions job named binaries_size_report in .github/workflows/core.yml. It depends on the existing core_firmware job, downloads produced artifacts matching core-firmware-*, and appends a markdown-formatted list of *-*-*.bin filenames and sizes to the workflow step summary. No source code, build scripts producing binaries, secrets handling, or artifact retention policy is modified.
Changed components
.github/workflows/core.ymlInspect captured patch +14 / −0
diff --git a/.github/workflows/core.yml b/.github/workflows/core.yml
index bdff47f6..c6fcd117 100644
--- a/.github/workflows/core.yml
+++ b/.github/workflows/core.yml
@@ -688,6 +688,20 @@ jobs:
include-hidden-files: true
if: always()
+ binaries_size_report:
+ name: Binaries' size report
+ runs-on: ubuntu-latest
+ needs:
+ - core_firmware
+ steps:
+ - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # actions/download-artifact@v8.0.0
+ with:
+ pattern: core-firmware-*
+ path: core/build
+ merge-multiple: true
+ - run: |
+ (echo '```'; find core/build/ -name '*-*-*.bin' -printf "%-40f %10s\n" | sort; echo '```') >> $GITHUB_STEP_SUMMARY
+
core_ui_comment:
name: Post comment with UI diff URLs
# run UI comment job only for 'trezor/trezor-firmware' scheduled workflows and internal PRs (see #5381)
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.