Use default EVAL-HD scripts and improve tooling

.github/workflows/ci.yml

@@ -1,5 +1,9 @@
 name: Full CI tests and Docker deployment
-on: [pull_request]
+on:
+  pull_request: {}
+  push:
+    branches:
+      - main
 
 jobs:
   build-docker:
@@ -122,14 +126,13 @@ jobs:
             make -C programs vcd SIM_EXE=/ecosystem/simulation/build/sim-32-o
             waveform-security
 
-      - name: Run EVAL-HD
+      - name: Run EVAL-HD example
         uses: addnab/docker-run-action@v3
         with:
           image: ecosystem:latest
           run: |
-            . /ecosystem/waveform-analysis/.venv/bin/activate
             cd /ecosystem/synthesis
-            ./eval-hd.py ../core/Core.v --cell-library ../eval-hd/freepdk-45nm/stdcells.lib
+            ./eval-hd.sh
 
       - name: Run one riscv-formal test
         uses: addnab/docker-run-action@v3
@@ -142,8 +145,9 @@ jobs:
   push-image:
     name: Push Docker image
     runs-on: ubuntu-latest
-    # only run when build and ci-tests both succeed
-    needs: [build-docker, ci-tests ]
+    # only run on the main branch when build and ci-tests both succeed
+    needs: [build-docker, ci-tests]
+    if: github.ref == 'refs/heads/main'
     steps:
       - name: Free Disk Space
         uses: jlumbroso/free-disk-space@main

install-scripts/eval-hd.sh

@@ -3,5 +3,5 @@
 set -ex
 
 git clone --recurse-submodules --depth 1 --shallow-submodules https://github.com/KULeuven-COSIC/eval-hd.git
-. /ecosystem/waveform-analysis/.venv/bin/activate
+. "$(dirname "$0")/../waveform-analysis/.venv/bin/activate"
 pip install pyosys

install-scripts/python-modules.sh

@@ -2,7 +2,7 @@
 
 set -ex
 
-cd /ecosystem/waveform-analysis
+cd "$(dirname "$0")/../waveform-analysis"
 python3 -m venv .venv
 source .venv/bin/activate
 # build module from waveform-analysis

noninterference-testing/README.md

@@ -10,7 +10,7 @@ For noninterference testing, we use the `waveform-security` binary, while for co
 
 ```shell
 $ make -C programs all
-$ make -C programs vcd SIM_EXE=/ecosystem/simulation/build/sim
+$ make -C programs vcd SIM_EXE="$(pwd)/../simulation/build/sim"
 
 $ waveform-correctness --p1 programs/vcd/pht-test1_FULLFENCE_LEAKBR_EXP1.vcd --p2 programs/vcd/pht-test1_NOFENCE_LEAKBR_EXP0.vcd --diff # correctness checking script
 ----------------------------------------

synthesis/eval-hd.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+source ../waveform-analysis/.venv/bin/activate
+../eval-hd/eval-hd.py ../core/Core.v --cell-library ../eval-hd/freepdk-45nm/stdcells.lib