Define prototype SARIF model for constraint validation results

.github/workflows/config/.nvmrc

@@ -1 +1 @@
-v16
+v20

.github/workflows/workflow-generate-website.yml

@@ -48,14 +48,14 @@ jobs:
     - id: checkout_latest_workflow
       name: Checkout Latest
       if: (github.event_name == 'workflow_dispatch' && github.event.inputs.commit_resources == 'true') || (github.event_name == 'push' && inputs.commit_resources == true)
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       with:
         persist-credentials: false
         submodules: recursive
     # use this for overything else (i.e., pull requests) where publication is not needed
     - name: Checkout Latest
       if: steps.checkout_latest_workflow.conclusion == 'skipped'
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       with:
         submodules: recursive
     - name: Setup Swap Space
@@ -70,7 +70,7 @@ jobs:
         . .github/workflows/config/.env
         echo "HUGO_VERSION=${HUGO_VERSION}" >> "${GITHUB_OUTPUT}"
     - name: Setup Hugo
-      uses: peaceiris/actions-hugo@v2
+      uses: peaceiris/actions-hugo@v3
       with:
         hugo-version: '${{ steps.hugo-version.outputs.HUGO_VERSION }}'
         extended: true
@@ -95,7 +95,7 @@ jobs:
         # Dart-Sass
         sudo snap install dart-sass
     # cache hugo modules
-    - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319
+    - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
       with:
         path: /tmp/hugo_cache
         key: ${{ runner.os }}-hugomod-${{ hashFiles('**/go.sum') }}
@@ -111,15 +111,15 @@ jobs:
         zip ${{ runner.temp }}/metaschema-website.zip -r public/
       working-directory: ${{ github.workspace }}/website
     - name: Upload generated site
-      uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3
+      uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a
       with:
         name: website
         path: |
           ${{ runner.temp }}/metaschema-website.zip
         retention-days: 5
     - id: linkchecker
       name: Link Checker
-      uses: lycheeverse/lychee-action@c053181aa0c3d17606addfe97a9075a32723548a
+      uses: lycheeverse/lychee-action@2b973e86fc7b1f6b36a93795fe2c9c6ae1118621
       with:
         args: --exclude-file .github/workflows/config/.lycheeignore --verbose --no-progress --accept 200,206,429 './website/public/**/*.html' --remap "https://pages.nist.gov/metaschema/ file://${GITHUB_WORKSPACE}/website/public/" --exclude-mail
         format: markdown
@@ -130,7 +130,7 @@ jobs:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       continue-on-error: true
     - name: Upload link check report
-      uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3
+      uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a
       with:
         name: html-link-report
         path: html-link-report.md
@@ -151,7 +151,7 @@ jobs:
         script: |
           core.setFailed('Link checker detected broken or invalid links, read attached report.')
     - name: Deploy Website
-      uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847
+      uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e
       if: github.ref_name == 'main' && ((github.event_name == 'push' && inputs.commit_resources == true) || (github.event_name == 'workflow_dispatch' && github.event.inputs.commit_resources == 'true'))
       with:
         personal_token: ${{ secrets.COMMIT_TOKEN }}

.github/workflows/workflow-validate-repo-markdown.yml

@@ -26,7 +26,7 @@ jobs:
       issues: write
     steps:
     # use this for pulls where checkout is anonymous
-    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       with:
         submodules: recursive
     # Setup runtime environment
@@ -56,7 +56,7 @@ jobs:
         # this command will filter out any docs Markdown files, which are checked in a different job
         git ls-files "*.md" -z | \
         grep --null-data -v "${{ inputs.ignorePattern }}" | \
-        xargs -0 markdown-link-check -c "${{ inputs.markdownLinkCheckConfig }}" | \
+        xargs -0n1 markdown-link-check -c "${{ inputs.markdownLinkCheckConfig }}" | \
         tee mlc_report.log
         # Exit code of xargs and markdown-link-check, not git or grep or tee pipe elements
         exit ${PIPESTATUS[2]}

.github/workflows/workflow-validate-website-content.yml

@@ -30,17 +30,17 @@ jobs:
       issues: write
     steps:
     - name: Checkout Latest
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       with:
         fetch-depth: 0 # this ensures that the tag and commit history are available
     - name: Checkout git ref of published website content
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       with:
         ref: ${{ inputs.site_git_ref }}
         path: ${{ inputs.site_git_ref_path }}
     - name: Check website HTML content links
       id: linkchecker
-      uses: lycheeverse/lychee-action@c053181aa0c3d17606addfe97a9075a32723548a
+      uses: lycheeverse/lychee-action@2b973e86fc7b1f6b36a93795fe2c9c6ae1118621
       with:
         args: --exclude-file .github/workflows/config/.lycheeignore --verbose --no-progress --accept 200,206,429 './${{ inputs.site_git_ref_path }}/**/*.html' --exclude-mail
         fail: true

README.md

@@ -41,7 +41,7 @@ Metaschema achieves this with:
 
 ## Contact us
 
-Maintainer: [David Waltermire](https://www.nist.gov/people/david-waltermire) - [@david-waltermire](https://github.com/david-waltermire), [NIST](https://www.nist.gov/) [Information Technology Labratory](https://www.nist.gov/itl), [Computer Security Division](https://www.nist.gov/itl/csd), [Security Components and Mechanisms Group](https://www.nist.gov/itl/csd/security-components-and-mechanisms)
+Maintainer: ITL OSCAL Team, [NIST](https://www.nist.gov/) [Information Technology Labratory](https://www.nist.gov/itl), [Computer Security Division](https://www.nist.gov/itl/csd), [Secure Systems and Applications Group](https://www.nist.gov/itl/csd/secure-systems-and-applications)
 
 Email us: [metaschema@nist.gov](mailto:metaschema@nist.gov)