purl-next: Create CI/CD integration for PURL binary integrity validation

[pombredanne]

Create a CI/CD integration for decentralized, local validation to validate the integrity of open source package

As the focus is on https://github.com/aboutcode-org/scancode-action we need:

• detailed guide/tutorial documentation focused on specific tech stacks
• ready to use templates for Java, Python, etc. that are aware of the context
  • need to research existing real repos and how we could include something in their context, including possibly forking their repo and applying our updates as a working example.
  • For instance, say you want to enable d2d on this repo https://github.com/bastikr/boolean.py/blob/master/.github/workflows/ ? what changes would we apply?

[pombredanne]

one thing could be to have a separate action?

[TG1999]

@keshav-space we are creating a python script here #1912 for same. You can use this to test the Ci/CD integration