feature(ci): check only changed advisories

Author: blackheaven

.github/workflows/check-advisories-standalone.yml

@@ -31,7 +31,8 @@ jobs:
   check-advisories:
     name: Invoke check-advisories workflow
     needs: [tools_changed, advisories_changed]
-    if: ${{ needs.tools_changed.outputs.should_skip == 'true'  && needs.advisories_changed.outputs.should_skip != 'true' }}
+    if: ${{ needs.tools_changed.outputs.should_skip == 'true' && needs.advisories_changed.outputs.should_skip != 'true' }}
     uses: ./.github/workflows/check-advisories.yml
     with:
       artifact-name: hsec-tools-main
+      changed-advisories: ${{ toJSON(needs.advisories_changed.outputs.changed_files) }}

.github/workflows/check-advisories.yml

@@ -5,6 +5,10 @@ on:
       artifact-name:
         required: true
         type: string
+      changed-advisoriese:
+        required: false
+        type: string
+        default: '[]'
 jobs:
   check-advisories:
     runs-on: ubuntu-20.04
@@ -23,6 +27,8 @@ jobs:
           path: ~/.local/bin
       - run: chmod +x ~/.local/bin/hsec-tools
       - name: Run advisory syntax checks
+        env:
+          CHANGED_ADVISORIES: ${{ fromJSON(inputs.changed-advisories) }}
         run: |
           cd source
           RESULT=0
@@ -31,7 +37,7 @@ jobs:
           while read FILE ; do
             echo -n "$FILE: "
             hsec-tools check "$FILE" || RESULT=1
-          done < <(find advisories EXAMPLE_README.md EXAMPLE_ADVISORY.md -type f -name "*.md")
+          done < <([ ${#CHANGED_ADVISORIES[@]} -gt 0 ] && echo $CHANGED_ADVISORIES || find advisories EXAMPLE_README.md EXAMPLE_ADVISORY.md -type f -name "*.md")
           exit $RESULT
       - name: Run advisory uniqueness checks
         run: |