kernelCTF: GHA: separate artifact names

Author: koczkatamas

.github/workflows/kernelctf-submission-verification.yaml

@@ -102,15 +102,15 @@ jobs:
         if: success()
         uses: actions/upload-artifact@v4
         with:
-          name: exploit_${{ env.RELEASE_ID }}
+          name: ${{ needs.structure_check.outputs.artifact_backup_dir }}_exploit_${{ env.RELEASE_ID }}
           path: ${{ env.EXPLOIT_DIR }}/exploit
           if-no-files-found: error
 
       - name: Upload exploit (original, build failed)
         if: failure() && steps.build_exploit.outcome == 'failure'
         uses: actions/upload-artifact@v4
         with:
-          name: exploit_${{ env.RELEASE_ID }}
+          name: ${{ needs.structure_check.outputs.artifact_backup_dir }}_exploit_${{ env.RELEASE_ID }}
           path: ./exploit
           if-no-files-found: error
 
@@ -161,7 +161,7 @@ jobs:
       - name: Upload debug build
         uses: actions/upload-artifact@v4
         with:
-          name: exploit_debug_${{ env.RELEASE_ID }}
+          name: ${{ needs.structure_check.outputs.artifact_backup_dir }}_exploit_debug_${{ env.RELEASE_ID }}
           path: ${{ env.EXPLOIT_DIR }}/exploit_debug
           if-no-files-found: error
 
@@ -271,7 +271,7 @@ jobs:
       - name: Upload repro QEMU logs as an artifact
         uses: actions/upload-artifact@v4
         with:
-          name: repro_logs_${{ env.RELEASE_ID }}
+          name: ${{ needs.structure_check.outputs.artifact_backup_dir }}_repro_logs_${{ env.RELEASE_ID }}
           path: ./kernelctf/repro/repro_log_*.txt
 
       - name: Reproduction // Summary
@@ -284,13 +284,13 @@ jobs:
       - name: Upload repro summary as an artifact
         uses: actions/upload-artifact@v4
         with:
-          name: repro_summary_${{ env.RELEASE_ID }}
+          name: ${{ needs.structure_check.outputs.artifact_backup_dir }}_repro_summary_${{ env.RELEASE_ID }}
           path: ./kernelctf/repro/repro_summary.md
 
   backup_artifacts:
     runs-on: ubuntu-latest
     needs: [structure_check, exploit_build, exploit_build_debug, exploit_repro]
-    if: always() && needs.structure_check.result == 'success'
+    if: always() && needs.structure_check.result == 'success' && github.event_name != 'workflow_call'
     steps:
       - name: Download artifacts
         uses: actions/download-artifact@v4

.github/workflows/kernelctf-verify-all.yaml

@@ -23,3 +23,27 @@ jobs:
     with:
       prNumber: ${{ matrix.pr }}
       skipRepro: ${{ inputs.skipRepro }}
+
+  backup_artifacts:
+    runs-on: ubuntu-latest
+    needs: [verify]
+    if: always()
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: ./artifacts
+
+      - name: Authenticate to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          credentials_json: '${{secrets.KERNELCTF_GCS_SA_KEY}}'
+
+      - name: Upload artifacts to GCS
+        uses: 'google-github-actions/upload-cloud-storage@v2'
+        with:
+          path: ./artifacts
+          destination: kernelctf-build/artifacts/verify_all_${{ github.run_id }}_pr${{ join(fromJSON(format('[{0}]', inputs.prs)), "_") }}
+          parent: false
+          predefinedAcl: publicRead
+          process_gcloudignore: false # removes warnings that .gcloudignore file does not exist