Skip to content

Conversation

@ahouseholder
Copy link
Contributor

@ahouseholder ahouseholder commented Sep 12, 2025

This PR

This branch has already been confirmed to work in https://github.com/CERTCC/SSVC-staging/actions/runs/17676879600

Copilot Summary

This pull request updates the schema file naming conventions and improves dependency management in the GitHub workflow files. The main changes include switching to new schema filenames with soft links for backward compatibility, updating workflow steps to use the uv package manager, and ensuring workflows are triggered on changes to the new dependency file.

Schema file updates and migration:

  • Updated references in data/schema/current/*.schema.json to point to new schema filenames (e.g., DecisionPoint_2_0_0.schema.json, SelectionList_2_0_0.schema.json) for improved consistency. [1] [2] [3]
  • Added new schema files and soft links in data/schema/v2/ to map old names to new ones, supporting a smoother transition. [1] [2] [3] [4] [5]
  • Added a README.md to explain the rationale for the soft links and the automated schema generation process.

Workflow and dependency management improvements:

  • Updated .github/workflows/deploy_site.yml and .github/workflows/link_checker.yml to use the uv package manager for dependency installation and site building, replacing direct pip and mkdocs calls for better reliability and reproducibility. [1] [2]
  • Modified workflow triggers to include changes to src/pyproject.toml, ensuring CI runs when dependencies are updated in the new format.
  • Streamlined dependency installation in .github/workflows/python-app.yml to use uv consistently and removed commented-out legacy pip commands.

@ahouseholder ahouseholder self-assigned this Sep 12, 2025
@ahouseholder ahouseholder added bug Something isn't working tech/environment Project environment, deployment, CI, etc. labels Sep 12, 2025
@ahouseholder ahouseholder added this to the 2025-09 milestone Sep 12, 2025
@ahouseholder ahouseholder changed the title Use uv in worfklows Improve consistency of uv use in worfklows Sep 12, 2025
Copy link
Contributor

@sei-vsarvepalli sei-vsarvepalli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See related discussion #947 - we should announce to others who may be trying to use the schema. I will add it to CSAF 2.1 candidate too.

@ahouseholder ahouseholder merged commit 8169c04 into main Sep 12, 2025
5 checks passed
@ahouseholder ahouseholder deleted the use-uv-in-worfklows branch September 12, 2025 17:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working tech/environment Project environment, deployment, CI, etc.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants