support fips branch for aws-lc (#278)

awslabs · Mar 12, 2024 · fd71588 · fd71588
1 parent 36ef287
commit fd71588
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/.github/actions/check-submodules/index.js b/.github/actions/check-submodules/index.js
@@ -143,8 +143,17 @@ const checkSubmodules = async function () {
             if (nonCrtRepo.test(submodule.name)) {
                 const isOnMain = await isAncestor(diff.thisCommit, 'origin/main', submodule.path);
                 if (!isOnMain) {
-                    core.setFailed(`Submodule ${submodule.name} is using a branch`);
-                    return;
+                    if (/^(aws-lc)$/.test(submodule.name)) {
+                        // for aws-lc we also use fips-2022-11-02 branch for FIPS support.
+                        const isOnFIPS = await isAncestor(diff.thisCommit, 'origin/fips-2022-11-02', submodule.path);
+                        if (!isOnFIPS) {
+                            core.setFailed(`Submodule ${submodule.name} is using a branch`);
+                            return;
+                        }
+                    } else {
+                        core.setFailed(`Submodule ${submodule.name} is using a branch`);
+                        return;
+                    }
                 }
             } else {
                 core.setFailed(`Submodule ${submodule.name} is not using a tagged release`);