The attestation verifier enclave packages the attestation verifier along with related services in an enclave.
The attestation verifier enclave is built using Nix for reproducibility. It does NOT use the standard nitro-cli based pipeline, and instead uses monzo/aws-nitro-util in order to produce bit-for-bit reproducible enclaves.
Reproducible builds can be done using Nix. The monorepo provides a Nix flake which includes this project and can be used to trigger builds:
nix build -v .#<flavor>.attestation.verifier-enclave.defaultSupported flavors:
gnumusl
This project is licensed under the GNU AGPLv3 or any later version. See LICENSE.txt.