ci(workflows): add BBG documentation and kernel summary generation

Add documentation for Baseband-guard (BBG) LSM module in main.yml
Implement kernel build summary generation in build.yml to track component versions and artifacts

.github/workflows/build.yml

@@ -764,3 +764,56 @@ jobs:
           name: ${{ env.FILE_NAME }}-Rejected-Patches
           path: patch-rejects
           compression-level: 9
+          
+      - name: Generate Kernel Summary
+        run: |
+          # Create a build variant identifier
+          BUILD_VARIANT="Android ${{ inputs.android_version }} - Kernel ${{ inputs.kernel_version }}.${{ inputs.sub_level }} - BBG: ${{ matrix.apply_bbg }} - Bypass: ${{ matrix.apply_bypass }}"
+          
+          echo "# Kernel Build Summary" >> $GITHUB_STEP_SUMMARY
+          
+          # Create a group for this specific build variant
+          echo "::group::$BUILD_VARIANT" >> $GITHUB_STEP_SUMMARY
+          
+          # Add build info
+          echo "## Build Information" >> $GITHUB_STEP_SUMMARY
+          echo "- **Android Version**: ${{ inputs.android_version }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Kernel Version**: ${{ inputs.kernel_version }}.${{ inputs.sub_level }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **BBG Status**: ${{ matrix.apply_bbg }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Bypass Mode**: ${{ matrix.apply_bypass }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          
+          # Add component versions
+          echo "## Component Versions" >> $GITHUB_STEP_SUMMARY
+          
+          # Get Wild_KSU commit
+          cd "$CONFIG/Wild_KSU"
+          WKSU_COMMIT=$(git rev-parse HEAD)
+          WKSU_URL="https://github.com/WildKernels/Wild_KSU/commit/$WKSU_COMMIT"
+          echo "- **Wild_KSU**: [$WKSU_COMMIT]($WKSU_URL)" >> $GITHUB_STEP_SUMMARY
+          
+          # Get BBG status
+          if [ "${{ matrix.apply_bbg }}" == "bbg" ]; then
+            cd "$CONFIG/baseband-guard"
+            BBG_COMMIT=$(git rev-parse HEAD)
+            BBG_URL="https://github.com/vc-teahouse/Baseband-guard/commit/$BBG_COMMIT"
+            echo "- **Baseband-guard**: [$BBG_COMMIT]($BBG_URL)" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "- **Baseband-guard**: Not installed" >> $GITHUB_STEP_SUMMARY
+          fi
+          
+          # Get SUSFS4KSU commit
+          cd "$GITHUB_WORKSPACE/susfs4ksu"
+          SUSFS_COMMIT=$(git rev-parse HEAD)
+          SUSFS_URL="https://gitlab.com/simonpunk/susfs4ksu/-/commit/$SUSFS_COMMIT"
+          echo "- **SUSFS4KSU (${{ inputs.susfs_version }})**: [$SUSFS_COMMIT]($SUSFS_URL)" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          
+          # Add links to the artifacts for this build
+          echo "## Build Artifacts" >> $GITHUB_STEP_SUMMARY
+          echo "- **AnyKernel3**: [${{ env.FILE_NAME }}-AnyKernel3](${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID})" >> $GITHUB_STEP_SUMMARY
+          echo "- **Boot Images**: [${{ env.FILE_NAME }}-Boot](${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID})" >> $GITHUB_STEP_SUMMARY
+          echo "- **Rejected Patches**: [${{ env.FILE_NAME }}-Rejected-Patches](${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID})" >> $GITHUB_STEP_SUMMARY
+          
+          # End this build variant group
+          echo "::endgroup::" >> $GITHUB_STEP_SUMMARY

.github/workflows/main.yml

@@ -211,7 +211,14 @@ jobs:
           - What are kernel modules? Kernel modules are pieces of code that can be loaded into the kernel at runtime to extend functionality (like device drivers, filesystem support, etc.). These are different from KernelSU/Magisk modules. 
           - The Problem: Sometimes when installing a custom kernel, the device tries to load a kernel module that fails due to version mismatches, missing dependencies, or signature verification issues. This can cause boot failures or device instability. 
           - The Solution: This version changes one line from false to true to force load the kernel module, bypassing the failure check that would normally prevent loading.
-      
+
+          🔹 BBG (Baseband-guard)
+          - A lightweight LSM (Linux Security Module) for Android kernel
+          - Blocks unauthorized writes to critical partitions/device nodes
+          - Prevents malicious tampering with baseband and boot chain
+          - Kernel-level protection via LSM hooks
+          - Reduces risk of soft-brick/hard-brick issues
+
           Features:
           -> Wild KSU
           -> Multi Manager Support for WKSU, KernelSU-Next! Needs Testing: KSU, MKSU RKSU, xxKSU, KowSU and SukiSU (Best compatibility with WKSU, no support will be provided for other managers)