merge: carry report provenance inputs into 7.15

# Conflicts:
#	scripts/generate-test-report.py

Author: BitHighlander

scripts/generate-test-report.py

@@ -3389,6 +3389,16 @@ def main():
     p.add_argument('--variant', choices=('full', 'bitcoin-only'),
                    default=os.environ.get('KK_FIRMWARE_VARIANT', 'full'),
                    help='Product variant whose required report coverage is validated')
+    p.add_argument('--firmware-sha', default=None,
+                   help='Exact firmware commit represented by this report')
+    p.add_argument('--python-sha', default=None,
+                   help='Exact python-keepkey commit represented by this report')
+    p.add_argument('--run-url', default=None,
+                   help='Exact CI run that produced the evidence')
+    p.add_argument('--generator-sha256', default=None,
+                   help='Combined wrapper/renderer digest')
+    p.add_argument('--arm-manifest-sha256', default=None,
+                   help='Digest binding the complete ARM manifest set')
     args = p.parse_args()
 
     fw = args.fw_version
@@ -3429,6 +3439,17 @@ def main():
                 print(f'  {tid} {mod}::{meth} -> {status}')
             sys.exit(1)
 
+    provenance = [
+        ('firmware', args.firmware_sha),
+        ('python', args.python_sha),
+        ('run', args.run_url),
+        ('generator', args.generator_sha256),
+        ('arm-manifests', args.arm_manifest_sha256),
+    ]
+    supplied = ['%s=%s' % item for item in provenance if item[1]]
+    if supplied:
+        os.environ['KK_BUILD_LABEL'] = ' | '.join(supplied)
+
     results = parse_junit(args.junit) if args.junit else {}
     render(args.output, fw, results, args.screenshots)