Skip to content

deprecate Trusted Storage #121114

deprecate Trusted Storage

deprecate Trusted Storage #121114

Triggered via pull request May 25, 2026 12:15
Status Failure
Total duration 2m 50s
Artifacts 1

compliance.yml

on: pull_request
Run compliance checks on patch series (PR)
2m 46s
Run compliance checks on patch series (PR)
Fit to window
Zoom out
Zoom in

Annotations

4 errors and 1 warning
Run compliance checks on patch series (PR)
Process completed with exit code 1.
Run compliance checks on patch series (PR): KconfigBasic.txt#L0
See https://docs.zephyrproject.org/latest/build/kconfig/tips.html for more details. Dependency loop =============== PSA_CRYPTO (defined at /home/runner/work/sdk-nrf/sdk-nrf/ncs/nrf/modules/../subsys/nrf_security/Kconfig:9, modules/mbedtls/Kconfig.psa.logic:4, modules/mbedtls/Kconfig.psa.logic:4), with definition... config PSA_CRYPTO bool default y if DT_HAS_ZEPHYR_PSA_CRYPTO_RNG_ENABLED && !IS_BOOTLOADER_IMG && GEN_ISR_TABLES config PSA_CRYPTO bool "PSA Crypto API" help Enable a PSA Crypto API provider in the build. If TF-M is enabled then it will be used for this scope, otherwise Mbed TLS will be used. PSA_CRYPTO_PROVIDER_CUSTOM can be selected to use an out-of-tree implementation. config PSA_CRYPTO bool "PSA Crypto API" depends on 0 help Enable a PSA Crypto API provider in the build. If TF-M is enabled then it will be used for this scope, otherwise Mbed TLS will be used. PSA_CRYPTO_PROVIDER_CUSTOM can be selected to use an out-of-tree implementation. (select-related dependencies: (BT_FAST_PAIR_CRYPTO_PSA && !TFM_PROFILE_TYPE_MINIMAL && <choice BT_FAST_PAIR_CRYPTO_BACKEND>) || (BT_MESH_CRYPTO_LIB && BT_MESH && BT_HCI_HOST && BT_RPC_STACK) || (BT_HOST_CRYPTO && BT_HCI_HOST && BT_RPC_STACK) || (BT_ECC && BT_HCI_HOST && BT_RPC_STACK) || (BT_CRYPTO && BT_RPC_STACK) || (NRF_CLOUD_FOTA_FULL_MODEM_UPDATE && NRF_MODEM_LIB && NRF_CLOUD) || (HOSTAP_CRYPTO_ALT_LEGACY_PSA && <choice HOSTAP_CRYPTO_BACKEND>) || (HOSTAP_CRYPTO_ALT_PSA && !WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE && <choice HOSTAP_CRYPTO_BACKEND>) || (OPENTHREAD_NRF_SECURITY_PSA && OPENTHREAD) || APP_JWT || (OPENTHREAD_CRYPTO_PSA && OPENTHREAD) || (WIFI_NM_WPA_SUPPLICANT_CRYPTO_MBEDTLS_PSA && WIFI_NM_WPA_SUPPLICANT_CRYPTO_ALT && WIFI_NM_WPA_SUPPLICANT) || (UOSCORE_UEDHOC_CRYPTO_COMMON && (UOSCORE || UEDHOC)) || (WIFI_NM_WPA_SUPPLICANT_CRYPTO_MBEDTLS_PSA && WIFI_NM_WPA_SUPPLICANT_CRYPTO_ALT && WIFI_NM_WPA_SUPPLICANT) || (WIFI_NM_WPA_SUPPLICANT_CRYPTO_MBEDTLS_PSA && WIFI_NM_WPA_SUPPLICANT_CRYPTO_ALT && WIFI_NM_WPA_SUPPLICANT && 0) || (OPENTHREAD_CRYPTO_PSA && OPENTHREAD && 0) || (UOSCORE_UEDHOC_CRYPTO_COMMON && (UOSCORE || UEDHOC) && 0) || (ESP32_BT_LE_CRYPTO_STACK_MBEDTLS && ESP32_BT_LE_SECURITY_ENABLE && (SOC_SERIES_ESP32C2 || SOC_SERIES_ESP32C5 || SOC_SERIES_ESP32C6 || SOC_SERIES_ESP32H2) && BT_ESP32 && BT_HCI && BT_DRIVERS) || (BT_SILABS_EFR32 && DT_HAS_SILABS_BT_HCI_EFR32_ENABLED && (ZEPHYR_HAL_SILABS_MODULE_BLOBS || BUILD_ONLY_NO_BLOBS) && SOC_GECKO_HAS_RADIO && BT_HCI && BT_DRIVERS) || (CRYPTO_MBEDTLS_SHIM && CRYPTO) || (WIFI_ESP32 && DT_HAS_ESPRESSIF_ESP32_WIFI_ENABLED && (ZEPHYR_HAL_ESPRESSIF_MODULE_BLOBS || BUILD_ONLY_NO_BLOBS) && !SMP && WIFI) || (ESP32_WIFI_MBEDTLS_CRYPTO && WIFI_ESP32 && WIFI) || (BT_MESH_CRYPTO_LIB && BT_MESH && BT_HCI_HOST && BT_HCI && BT) || (BT_HOST_CRYPTO && BT_HCI_HOST && BT_HCI && BT) || (BT_ECC && BT_HCI_HOST && BT_HCI && BT) || (BT_CRYPTO && BT_HCI && BT) || (JWT_SIGN_RSA_PSA && <choice>) || (JWT_SIGN_ECDSA_PSA && <choice>) || (MCUMGR_GRP_FS_HASH_SHA256 && MCUMGR_GRP_FS_CHECKSUM_HASH && MCUMGR_GRP_FS && MCUMGR) || (UPDATEHUB && FLASH && REBOOT && IMG_MANAGER && BOOTLOADER_MCUBOOT && NETWORKING && NET_UDP && NET_SOCKETS && COAP && DNS_RESOLVER && JSON_LIBRARY && HWINFO) || (NET_IPV6_IID_STABLE && !NET_6LO && <choice NET_IPV6_IID_GENERATION>) || (NET_IPV6_PE && NET_NATIVE_IPV6 && NET_IPV6 && !NET_RAW_MODE && NETWORKING) || (WEBSOCKET_CLIENT && NETWORKING) || (NET_SOCKETS_SOCKOPT_TLS && NET_NATIVE && NET_SOCKETS && NETWORKING) || (WIREGUARD_CRYPTO && WIREGUARD && NETWORKING) || (SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION_AEAD && <choice SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION>) || (FLASH_AREA_CHECK_INTEGRITY && FLASH_MAP)) (imply-related dependencies: (BT_FAST_PAIR_CRYPTO_PSA && !TFM_PROFILE_TYPE_MINIMAL && <choice BT_FAST_PAIR_CRYPTO_BACKEND>) || (BT_MESH_CRYPTO_LIB && BT_MESH && BT_HCI_HOST && BT_RPC_STACK) || (BT_HOST_CRYPTO && BT_HCI_HOST && BT_RPC_STACK) || (BT_ECC && BT_HCI_HOST && BT_RPC_STACK) || (BT_CRYPTO && BT_RPC_STACK) || (NRF_CLOUD_FOTA_FULL_MODEM_UPDATE && NRF_MODEM_LIB && NRF_
Run compliance checks on patch series (PR): Kconfig.txt#L0
See https://docs.zephyrproject.org/latest/build/kconfig/tips.html for more details. Dependency loop =============== UPDATEHUB (defined at subsys/mgmt/updatehub/Kconfig:4), with definition... menuconfig UPDATEHUB bool "UpdateHub Firmware Over-the-Air support" select REQUIRES_FULL_LIBC select IMG_ENABLE_IMAGE_CHECK select MPU_ALLOW_FLASH_WRITE select PSA_CRYPTO select PSA_WANT_ALG_SHA_256 depends on FLASH && REBOOT && IMG_MANAGER && BOOTLOADER_MCUBOOT && NETWORKING && NET_UDP && NET_SOCKETS && COAP && DNS_RESOLVER && JSON_LIBRARY && HWINFO help UpdateHub is an enterprise-grade solution which makes simple to remotely update all your embedded devices in the field. It handles all aspects related to sending Firmware Over-the-Air (FOTA) updates with maximum security and efficiency, while you focus in adding value to your product. ...depends on HWINFO (defined at soc/ti/mspm0/Kconfig:18, drivers/hwinfo/Kconfig:6), with definition... config HWINFO bool default y if POWEROFF depends on SOC_FAMILY_TI_MSPM0 menuconfig HWINFO bool "Hardware information drivers" help Enable hwinfo driver. (select-related dependencies: HW_ID_LIBRARY || (ETH_DWMAC_STM32H7X && !ETH_STM32_HAL && (SOC_SERIES_STM32H5X || SOC_SERIES_STM32H7X || SOC_SERIES_STM32H7RSX) && DT_HAS_ST_STM32_ETHERNET_ENABLED && ETH_DRIVER) || (ETH_STM32_HAL && DT_HAS_ST_STM32_ETHERNET_ENABLED && ETH_DRIVER) || (ETH_NXP_ENET_QOS_MAC_UNIQUE_MAC_ADDRESS && ETH_NXP_ENET_QOS_MAC && ETH_NXP_ENET_QOS && ETH_DRIVER) || (WDT_XILINX_AXI_HWINFO_API && WDT_XILINX_AXI && WATCHDOG) || (XSI_SINGLE_PROCESS && POSIX_SYSTEM_INTERFACES) || (SHELL_BACKEND_MQTT && NET_TCP && NET_IPV4 && NETWORKING && SHELL_BACKENDS && SHELL) || USB_DEVICE_STACK) (imply-related dependencies: HW_ID_LIBRARY || (ETH_DWMAC_STM32H7X && !ETH_STM32_HAL && (SOC_SERIES_STM32H5X || SOC_SERIES_STM32H7X || SOC_SERIES_STM32H7RSX) && DT_HAS_ST_STM32_ETHERNET_ENABLED && ETH_DRIVER) || (ETH_STM32_HAL && DT_HAS_ST_STM32_ETHERNET_ENABLED && ETH_DRIVER) || (ETH_NXP_ENET_QOS_MAC_UNIQUE_MAC_ADDRESS && ETH_NXP_ENET_QOS_MAC && ETH_NXP_ENET_QOS && ETH_DRIVER) || (WDT_XILINX_AXI_HWINFO_API && WDT_XILINX_AXI && WATCHDOG) || (XSI_SINGLE_PROCESS && POSIX_SYSTEM_INTERFACES) || (SHELL_BACKEND_MQTT && NET_TCP && NET_IPV4 && NETWORKING && SHELL_BACKENDS && SHELL) || USB_DEVICE_STACK) ...depends on the choice symbol SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION_AEAD (defined at subsys/secure_storage/Kconfig.its_transform:7), with definition... config SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION_AEAD bool "ITS transform module implementation using AEAD to protect the data" select PSA_CRYPTO imply HWINFO depends on <choice SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION> ...depends on <choice SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION> (defined at /home/runner/work/sdk-nrf/sdk-nrf/ncs/nrf/modules/../subsys/secure_storage/compatibility/Kconfig:22, subsys/secure_storage/Kconfig.its_transform:4), with definition... choice SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION bool default SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION_TSBC if SECURE_STORAGE_TRUSTED_STORAGE_COMPATIBILITY depends on SECURE_STORAGE choice SECURE_STORAGE_ITS_TRANSFORM_IMPLEMENTATION bool "ITS transform module implementation" depends on SECURE_STORAGE_ITS_TRANSFORM_MODULE && SECURE_STORAGE ...depends on SECURE_STORAGE_TRUSTED_STORAGE_COMPATIBILITY (defined at /home/runner/work/sdk-nrf/sdk-nrf/ncs/nrf/modules/../subsys/secure_storage/compatibility/Kconfig:4), with definition... config SECURE_STORAGE_TRUSTED_STORAGE_COMPATIBILITY bool "Trusted storage backward compatibility" select SECURE_STORAGE_64_BIT_UID select SECURE_STORAGE_ITS_STORE_SETTINGS_NAME_CUSTOM if SECURE_STORAGE_ITS_STORE_IMPLEMENTATION_SETTINGS depends on (SECURE_STORAGE_ITS_STORE_IMPLEMENTATION_SETTINGS || SECURE_STORAGE_ITS_STORE_IMPLEMENTATION_CUSTOM) && (SETTINGS_ZMS || SETTINGS_ZMS_LEGACY || (SETTINGS_NVS && !SOC_SERIES_NRF54L) || SECURE_STORAGE_ITS_STORE_IMPLEMENTATION_CUSTOM) && SECURE_STORAGE help Enable to make the Secure storage subsystem compatible with an
Run compliance checks on patch series (PR)
Process completed with exit code 2.
Run compliance checks on patch series (PR)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf, actions/checkout@v4, actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
compliance.xml
4.14 KB
sha256:bbee39d74af239276f2a172052c7a3237cb78b4e6f249bc36962e6673c0559c8