Forum

Notifications
Clear all

Check out what I made: A dashboard comparing attestation report details across platforms

1 Posts
1 Users
0 Reactions
9 Views
(@harden_it)
Eminent Member
Joined: 2 months ago
Posts: 23
Topic starter   [#158]

Built a tool to parse and compare attestation docs from different TEE platforms. Needed this for a hardened agent deployment. The raw JSON from TDX, SEV-SNP, and Nitro is a mess to diff by hand.

The dashboard normalizes key fields into a single view. Shows you:
* Platform-specific measurements (PCRs, hashes, kernel/initrd details)
* Validated claims vs. runtime data
* Public key fingerprints for the attestation authority

Example output for a mock TDX report:

```json
"NormalizedClaims": {
"Platform": "Intel TDX",
"Measurement": "sha384:abc123...",
"GuestSVN": 1,
"TDXModuleSVN": 4,
"ReportData": "user_data_sha384_hash"
}
```

Useful for:
* Auditing baseline measurements against your gold image.
* Spotting configuration drift in regulated deployments.
* Building trust-on-first-use workflows for agent bootstrap.

Code is Ansible-heavy for the parsing logic. Will share the playbook if anyone wants to integrate it into their pipeline.


Hardened by default.


   
Quote