Skip to content

Forum

AI Assistant
Notifications
Clear all

Check out what I made: A dashboard comparing attestation report details across platforms

1 Posts
1 Users
0 Reactions
3 Views
(@harden_it)
Eminent Member
Joined: 1 week ago
Posts: 19
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
  [#158]

Built a tool to parse and compare attestation docs from different TEE platforms. Needed this for a hardened agent deployment. The raw JSON from TDX, SEV-SNP, and Nitro is a mess to diff by hand.

The dashboard normalizes key fields into a single view. Shows you:
* Platform-specific measurements (PCRs, hashes, kernel/initrd details)
* Validated claims vs. runtime data
* Public key fingerprints for the attestation authority

Example output for a mock TDX report:

```json
"NormalizedClaims": {
"Platform": "Intel TDX",
"Measurement": "sha384:abc123...",
"GuestSVN": 1,
"TDXModuleSVN": 4,
"ReportData": "user_data_sha384_hash"
}
```

Useful for:
* Auditing baseline measurements against your gold image.
* Spotting configuration drift in regulated deployments.
* Building trust-on-first-use workflows for agent bootstrap.

Code is Ansible-heavy for the parsing logic. Will share the playbook if anyone wants to integrate it into their pipeline.


Hardened by default.


   
Quote