Also validate generator output with NIST OSCAL CLI (#453)

* Use temurin in java installer

Signed-off-by: Adolfo García Veytia (Puerco) <[email protected]>

* Run OSCAL check also with NIST CLI

Signed-off-by: Adolfo García Veytia (Puerco) <[email protected]>

---------

Signed-off-by: Adolfo García Veytia (Puerco) <[email protected]>

Author: puerco

.github/workflows/oscal-check.yaml

@@ -40,18 +40,24 @@ jobs:
         uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e
         id: setup-java
         with:
-          distribution: adopt
-          java-version: 11
+          distribution: temurin
+          java-version: 17
 
       - run: |
           go build -C .build/go-oscal/ -o ${PWD}/go-oscal
           go build -C cmd/  -o ../baseline-compiler
           ./baseline-compiler oscal -b baseline > oscal-sample.json
           ./go-oscal validate --input-file oscal-sample.json 
 
+      - name: Validate Catalog with oscal-club/metaschema CLI
+        uses: oscal-club/oscal-cli-action@6a8b6368885714e46fa1d4a65a6ce665902e08b7 # v2.1.0
+        with:
+          args: catalog validate oscal-sample.json 
+
       - name: Validate Catalog with oscal-club/NIST CLI
-        uses: oscal-club/oscal-cli-action@b5b0c80a1a158797bea4475d13d12c494b56019b # v2.0.2
+        uses: oscal-club/oscal-cli-action@6a8b6368885714e46fa1d4a65a6ce665902e08b7 # v2.1.0
         with:
+          oscalCliPackageUrl: https://repo1.maven.org/maven2/gov/nist/secauto/oscal/tools/oscal-cli/cli-core/1.0.3/cli-core-1.0.3-oscal-cli.tar.bz2
           args: catalog validate oscal-sample.json