Add integration tests for supported cloud providers

[grydz]

Added

• Basic rust integration tests: quote generation/parsing and remote attestation
• CI with remote test execution on AWS, Azure and GCP

[Copilot]

Pull request overview

Adds Rust-based integration test binaries for TEE quote generation/parsing and quote verification, and wires them into GitHub Actions workflows that provision ephemeral instances on AWS/Azure/GCP to execute those binaries remotely.

Changes:

• Introduces three workspace member crates under tests/ (aws_tests, azure_tests, gcp_tests) that build provider-specific integration test harness binaries.
• Updates the main build workflow to compile test binaries (cargo test --tests --no-run) and upload them as artifacts for reuse.
• Adds reusable per-cloud workflows plus a top-level integration.yml to orchestrate remote execution on each provider.

Reviewed changes

Copilot reviewed 15 out of 16 changed files in this pull request and generated 14 comments.

Show a summary per file

File	Description
tests/gcp_tests/src/test.rs	Adds GCP CVM detection, quote retrieval/parsing, and verification tests.
tests/gcp_tests/src/lib.rs	Empty crate root for the GCP integration test package.
tests/gcp_tests/Cargo.toml	Defines the gcp_integration_tests test target and dependencies.
tests/azure_tests/src/test.rs	Adds Azure CVM detection, quote retrieval/parsing, and verification tests.
tests/azure_tests/src/lib.rs	Empty crate root for the Azure integration test package.
tests/azure_tests/Cargo.toml	Defines the az_integration_tests test target and dependencies.
tests/aws_tests/src/test.rs	Adds AWS CVM detection, quote retrieval/parsing, and verification tests.
tests/aws_tests/src/lib.rs	Adds crate code (currently template) for the AWS integration test package.
tests/aws_tests/Cargo.toml	Defines the aws_integration_tests test target and dependencies.
Cargo.toml	Registers the three new tests/* crates as workspace members.
Cargo.lock	Adds lock entries for the new test crates.
.github/workflows/integration.yml	Orchestrates provider workflows on PRs and depends on the build workflow for artifacts.
.github/workflows/gcp.yml	Provisions GCP CVM, copies the test binary, and executes it remotely.
.github/workflows/build.yml	Adds workflow_call, builds/upload test binaries, and tweaks CI steps.
.github/workflows/azure.yml	Provisions Azure CVM, copies the test binary, and executes it remotely.
.github/workflows/aws.yml	Provisions AWS instance, copies the test binary, and executes it remotely.

Comments suppressed due to low confidence (1)

.github/workflows/build.yml:28

• cargo install cargo-machete without --locked makes CI non-reproducible (it can start failing when a new dependency release lands). Using --locked pins the resolved dependency versions from the crate's lockfile.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.