From e5c887e121e6532b7532c716f4fac3b486aad6c7 Mon Sep 17 00:00:00 2001
From: Gerwin Klein <gerwin.klein@proofcraft.systems>
Date: Sun, 11 Feb 2024 16:50:44 +1100
Subject: [PATCH] workflows: use Freeze Code step for sel4test-hw

This makes sure all build jobs run on the same repo manifest state.

Signed-off-by: Gerwin Klein <gerwin.klein@proofcraft.systems>
---
 .github/workflows/sel4test-hw.yml | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/sel4test-hw.yml b/.github/workflows/sel4test-hw.yml
index ce022e50..686ed80d 100644
--- a/.github/workflows/sel4test-hw.yml
+++ b/.github/workflows/sel4test-hw.yml
@@ -21,8 +21,8 @@ permissions:
   contents: read
 
 jobs:
-  hw-build:
-    name: HW Build
+  code:
+    name: Freeze Code
     runs-on: ubuntu-latest
     if: ${{ github.event_name == 'pull_request_target' &&
               github.event.action != 'labeled' &&
@@ -32,7 +32,21 @@ jobs:
               github.event.action == 'labeled' &&
               (github.event.label.name == 'hw-build' ||
                github.event.label.name == 'hw-test') }}
-    # To reduce the load (especiually on the machine queue) we cancel any older
+    outputs:
+      xml: ${{ steps.repo.outputs.xml }}
+    steps:
+    - id: repo
+      uses: seL4/ci-actions/repo-checkout@master
+      with:
+        manifest_repo: sel4test-manifest
+        manifest: master.xml
+        sha: ${{ github.event.pull_request.head.sha }}
+
+  hw-build:
+    name: HW Build
+    runs-on: ubuntu-latest
+    needs: code
+    # To reduce the load (especially on the machine queue) we cancel any older
     # runs of this workflow for the current PR.
     concurrency:
       group: ${{ github.workflow }}-sel4test-pr-build-${{ github.event.number }}
@@ -47,9 +61,9 @@ jobs:
     - name: Build
       uses: seL4/ci-actions/sel4test-hw@master
       with:
+        xml: ${{ needs.code.outputs.xml }}
         march: ${{ matrix.march }}
         compiler: ${{ matrix.compiler }}
-        sha: ${{ github.event.pull_request.head.sha }}
     - name: Upload images
       uses: actions/upload-artifact@v4
       with: