Establish native Linux ARM64 Android CI and verification gates (#94)

tools/android-build/src/main.rs

@@ -5,6 +5,7 @@ use std::{env, error::Error, fs, path::Path};
 
 mod bindings;
 mod contract;
+mod gates;
 mod native;
 mod toolchain;
 
@@ -51,6 +52,28 @@ fn main() -> Result<(), Box<dyn Error>> {
         [_, command, directory] if command == "audit-native" => {
             native::audit_directory(Path::new(directory))?
         }
+        [_, command, manifest, backup, extraction] if command == "audit-manifest" => {
+            gates::manifest(
+                Path::new(manifest),
+                Path::new(backup),
+                Path::new(extraction),
+            )?;
+        }
+        [_, command, package, symbols] if command == "audit-release" => {
+            native::audit_release(Path::new(package), Path::new(symbols))?;
+        }
+        [_, command, input, output] if command == "safe-reports" => {
+            gates::reports(Path::new(input), Path::new(output))?;
+        }
+        [_, command, android, rust, lock, policy, output] if command == "sbom" => {
+            gates::sbom(
+                Path::new(android),
+                Path::new(rust),
+                Path::new(lock),
+                Path::new(policy),
+                Path::new(output),
+            )?;
+        }
         [_, command, cargo, rust, ndk, ndk_version, cargo_ndk] if command == "check-toolchain" => {
             toolchain::check(
                 Path::new(cargo),
@@ -62,7 +85,7 @@ fn main() -> Result<(), Box<dyn Error>> {
         }
         _ => {
             return Err(
-                "usage: ironstorage-android-build <fixtures output.kt | check android-dir | prepare-bindings input output | package-native input output | audit-elf path abi | audit-native jniLibs | audit-apk-split apk abi | audit-package apk-or-aab | check-toolchain cargo rust ndk ndk-version cargo-ndk-version>".into(),
+                "usage: ironstorage-android-build <fixtures output.kt | check android-dir | prepare-bindings input output | package-native input output | audit-elf path abi | audit-native jniLibs | audit-apk-split apk abi | audit-package apk-or-aab | audit-release apk symbols | audit-manifest manifest.xml backup.xml extraction.xml | sbom android.json rust.txt Cargo.lock policy.json output.json | safe-reports input-dir output.json | check-toolchain cargo rust ndk ndk-version cargo-ndk-version>".into(),
             );
         }
     }