Feat: add bazel build (S-Core Integration)

.bazelrc

@@ -0,0 +1,16 @@
+# SPDX-FileCopyrightText: 2026 Copyright (c) Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+
+common --registry=https://raw.githubusercontent.com/eclipse-score/bazel_registry/main/
+common --registry=https://bcr.bazel.build
+common --experimental_isolated_extension_usages
+
+build --incompatible_strict_action_env

.bazelversion

@@ -0,0 +1 @@
+8.6.0

comm-mbedtls/mbedtls-sys/patches/ed25519-psa-driver.patch.license → .bazelversion.license

@@ -1,4 +1,4 @@
-SPDX-FileCopyrightText: 2025 Copyright (c) Contributors to the Eclipse Foundation
+SPDX-FileCopyrightText: 2026 Copyright (c) Contributors to the Eclipse Foundation
 
 See the NOTICE file(s) distributed with this work for additional
 information regarding copyright ownership.

.github/workflows/build.yml

@@ -28,6 +28,33 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  bazel:
+    name: Bazel (Ubuntu)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          submodules: false
+      - name: Verify mbedTLS revision consistency
+        run: python3 bazel/check_mbedtls_revision.py
+      - name: Install Bazelisk
+        uses: bazelbuild/setup-bazelisk@v3
+      - name: Build mbedTLS library
+        run: bazel build //:cda_mbedtls
+      - name: Build reference binary
+        run: bazel build //:opensovd-cda
+      - name: Query targets
+        run: bazel query //...
+      - name: Verify mbedTLS graph excludes OpenSSL
+        run: |
+          openssl_targets="$(bazel cquery 'filter("openssl", deps(//:cda_mbedtls))' --output=label)"
+          if [[ -n "${openssl_targets}" ]]; then
+            echo "::error::mbedTLS target graph contains OpenSSL targets:"
+            echo "${openssl_targets}"
+            exit 1
+          fi
+
   features:
     runs-on: ubuntu-latest
     env:

.gitignore

@@ -13,6 +13,7 @@ build
 _build
 __pycache__
 /target
+/bazel-*
 
 # created by plantuml?
 ?

.pre-commit-config.yaml

@@ -58,7 +58,6 @@ repos:
         args:
           - --allowed-chars=µ,§
       - id: no-banner-comment-check
-        exclude: ^comm-mbedtls/
       - id: validate-cargo-lints
       - id: cargo-fmt
       - id: clippy

BUILD.bazel

@@ -0,0 +1,27 @@
+# SPDX-FileCopyrightText: 2026 Copyright (c) Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+
+exports_files([
+    "Cargo.lock",
+    "Cargo.toml",
+])
+
+alias(
+    name = "cda_mbedtls",
+    actual = "//cda-main:opensovd_cda_lib",
+    visibility = ["//visibility:public"],
+)
+
+alias(
+    name = "opensovd-cda",
+    actual = "//cda-main:opensovd-cda",
+    visibility = ["//visibility:public"],
+)