Skip to content

Clarify the requirement in OSPS-QA-04.01 #266

Clarify the requirement in OSPS-QA-04.01

Clarify the requirement in OSPS-QA-04.01 #266

Workflow file for this run

# SPDX-FileCopyrightText: Copyright 2025 The Open Source Project Security Baseline Authors
# SPDX-License-Identifier: Apache-2.0
---
name: Validate OSCAL Output
on:
pull_request: {}
workflow_dispatch: {}
permissions:
contents: read
jobs:
verify:
name: Setup and Generate
runs-on: ubuntu-latest
steps:
- name: clone-baseline
id: clone-baseline
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false
- name: clone-go-oscal
id: clone-go-oscal
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
repository: defenseunicorns/go-oscal
path: .build/go-oscal/
persist-credentials: false
- uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
name: setup-go
with:
go-version: '1.24'
check-latest: true
cache: true
- name: Setup Java
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
id: setup-java
with:
distribution: adopt
java-version: 11
- run: |
go build -C .build/go-oscal/ -o ${PWD}/go-oscal
go build -C cmd/ -o ../baseline-compiler
./baseline-compiler oscal -b baseline > oscal-sample.json
./go-oscal validate --input-file oscal-sample.json
- name: Validate Catalog with oscal-club/NIST CLI
uses: oscal-club/oscal-cli-action@1a210b84bc1fd6adf15c9cf0d46a51d15a3d8301 # v2.0.1
with:
args: catalog validate oscal-sample.json