build: build-docker.sh: adjust paths for xtask
What the developer wrote
Authored by Martin Milata
build: build-docker.sh: adjust paths for xtask
What changed, and why it matters
This commit updates a build script to look for compiled firmware files in a new directory path (`build-xtask/artifacts/...`) instead of the old path (`build/...`). It is a routine build-system path adjustment with no apparent security relevance.
No security action required; treat as normal build-maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change modifies build-docker.sh to align artifact collection with the output layout produced by the xtask build tooling. It updates file existence checks, fingerprint generation paths, and copy operations. There is no modification to cryptographic checks, signature verification, or firmware logic.
Changed components
build-docker.shInspect captured patch +6 / −6
diff --git a/build-docker.sh b/build-docker.sh
index 15f11fa8..4cf824ef 100755
--- a/build-docker.sh
+++ b/build-docker.sh
@@ -278,16 +278,16 @@ for TREZOR_MODEL in ${MODELS[@]}; do
rm -rf /build/*
uv run make clean vendor $MAKE_TARGETS QUIET_MODE=1
for item in bootloader secmon kernel firmware prodtest; do
- if [ -s build/\$item/\$item.bin ]; then
+ if [ -s build-xtask/artifacts/$TREZOR_MODEL/\$item.bin ]; then
uv run ../python/tools/firmware-fingerprint.py \
- -o build/\$item/\$item.bin.fingerprint \
- build/\$item/\$item.bin \
- || echo "No fingerprint for build/\$item/\$item.bin"
+ -o build-xtask/artifacts/$TREZOR_MODEL/\$item.bin.fingerprint \
+ build-xtask/artifacts/$TREZOR_MODEL/\$item.bin \
+ || echo "No fingerprint for build-xtask/artifacts/TREZOR_MODEL/\$item.bin"
fi
- if [ -d build/\$item/ ]; then
+ if [ -f build-xtask/artifacts/$TREZOR_MODEL/\$item.bin ]; then
# copy only the artifacts to the build output directory
mkdir /build/\$item/
- cp -v build/\$item/\$item* /build/\$item/
+ cp -v build-xtask/artifacts/$TREZOR_MODEL/\$item* /build/\$item/
fi
done
chown -R $USER:$GROUP /build
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.