ci(workflow): add a GitHub Action to validate JSON schema changes (#258)

This will address the deficiency surfaced in #163 --------- Signed-off-by: Andrew Pollock <[email protected]>
ossf · Aug 28, 2024 · 1c585fd · 1c585fd
1 parent 4f79ec8
commit 1c585fd
Show file tree

Hide file tree

Showing 2 changed files with 37 additions and 0 deletions.
diff --git a/.github/workflows/validate-schema.yml b/.github/workflows/validate-schema.yml
@@ -0,0 +1,35 @@
+name: Validate OSV JSON Schema
+
+on:
+  pull_request:
+    branches:
+      - main
+    types:
+      - opened
+      - edited
+      - reopened
+
+permissions:
+  pull-requests: read
+
+jobs:
+  validate-osv-schema:
+    name: Validate OSV Schema
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Check for changes to OSV Schema
+        id: check-for-changed-osv-schema
+        uses: tj-actions/changed-files@v41
+        with:
+          files: |
+            validation/schema.json
+      - name: Validate OSV Schema
+        if: steps.check-for-changed-osv-schema.outputs.any_changed == 'true'
+        uses: dsanders11/[email protected]
+        with:
+          # https://github.com/marketplace/actions/json-schema-validate#validating-schema
+          schema: json-schema
+          files: validation/schema.json
diff --git a/.gitignore b/.gitignore
@@ -0,0 +1,2 @@
+go.work
+go.work.sum