From cb6996d1ee3db6ad4bfd5a7e4310298510543586 Mon Sep 17 00:00:00 2001
From: David Garske <david@wolfssl.com>
Date: Tue, 10 Nov 2026 10:44:01 -0800
Subject: [PATCH] Allow the test-only weak entropy fallback in the Zephyr QEMU
 CI build

---
 .github/workflows/zephyr.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/zephyr.yml b/.github/workflows/zephyr.yml
index f726e8128..765f242b1 100644
--- a/.github/workflows/zephyr.yml
+++ b/.github/workflows/zephyr.yml
@@ -58,6 +58,12 @@ jobs:
         working-directory: zephyr
         run: west update -n -o=--depth=1
 
+      - name: Opt in to test-only QEMU entropy
+        run: |
+          settings=zephyr/modules/crypto/wolfssl/zephyr/user_settings.h
+          test -f "$settings"
+          sed -i '1i#define WOLFSSL_ACCEPT_WEAK_ENTROPY /* QEMU test only */' "$settings"
+
       - name: Export zephyr
         working-directory: zephyr
         run: west zephyr-export