ci: Use Kani with Nix

Signed-off-by: Nick Spinale <nick@nickspinale.com>
seL4 · Jun 5, 2024 · fbb7724 · fbb7724
1 parent b2a7676
commit fbb7724
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
@@ -127,9 +127,16 @@ jobs:
     name: Check Kani proofs
     runs-on: ubuntu-latest
     steps:
+      - uses: cachix/install-nix-action@v26
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+      - uses: cachix/cachix-action@v14
+        with:
+          name: coliasgroup
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
       - uses: actions/checkout@v4
       - name: Check Kani proofs
-        run: make -C hacking/kani/docker check
+        run: make check-kani-proofs
   deploy-docs:
     name: Deploy docs
     if: github.ref == format('refs/heads/{0}', github.event.repository.default_branch)

diff --git a/Makefile b/Makefile
@@ -122,6 +122,10 @@ witness-fast-tests:
 	$(nix_build) -A witnessFastTests --no-out-link
 	$(try_restore_terminal)
 
+.PHONY: check-kani-proofs
+check-kani-proofs:
+	$(run_in_nix_shell) "cargo kani -p sel4-bitfield-ops"
+
 .PHONY: everything-except-non-incremental
 everything-except-non-incremental:
 	$(nix_build) -A everythingExceptNonIncremental --no-out-link