Benchmark transcript-bound hybrid handshake #6
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Real PQC Integration | |
| on: | |
| pull_request: | |
| paths: | |
| - "src/hybrid_pki/pqc/**" | |
| - "src/hybrid_pki/hybrid/**" | |
| - "tests/test_pqc.py" | |
| - "tests/test_hybrid.py" | |
| - "Dockerfile.pqc" | |
| - ".github/workflows/pqc-integration.yml" | |
| push: | |
| branches: [main] | |
| schedule: | |
| - cron: "30 5 * * 1" | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| jobs: | |
| real-pqc: | |
| name: ML-KEM and ML-DSA integration | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 45 | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Build pinned PQC image | |
| run: docker build --file Dockerfile.pqc --tag hybrid-pki-pqc:test . | |
| - name: Run real PQC and hybrid tests | |
| run: | | |
| docker run --rm \ | |
| --env HYBRID_PKI_DISABLE_OQS=0 \ | |
| --env HYBRID_PKI_ENABLE_MUTATIONS=1 \ | |
| hybrid-pki-pqc:test \ | |
| pytest -v tests/test_pqc.py tests/test_hybrid.py |