enrichment for 2026-08-13 (#223) #603
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Validations" | |
| on: | |
| # needed for publishing commit images on the main branch | |
| push: | |
| branches: | |
| - main | |
| # needed when running from forks | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| validate-schema: | |
| name: "Validate Schema" | |
| runs-on: ubuntu-latest | |
| container: | |
| image: python:3.13-alpine | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Install OS dependencies | |
| run: apk add --no-cache taplo git sqlite | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run schema validation | |
| run: taplo validate --schema file:${PWD}/schema/toml/0.1.0.schema.json | |
| - name: Run format validation | |
| run: taplo format --check | |
| - name: Configure git | |
| run: git config --global --add safe.directory "$GITHUB_WORKSPACE" | |
| - name: Install python dependencies | |
| run: pip install git+https://github.com/anchore/security-cli | |
| - name: Render the vulnerability index specs sqlite | |
| run: anchore-security-cli -v vuln-index spec render --data-path data -o ${{ runner.temp }}/vuln-index-specs |