diff --git a/.github/workflows/ingest-ghsa.yml b/.github/workflows/ingest-ghsa.yml index 125f5308a7..fce7859eb4 100644 --- a/.github/workflows/ingest-ghsa.yml +++ b/.github/workflows/ingest-ghsa.yml @@ -27,7 +27,7 @@ jobs: with: token: ${{ secrets.GH_TOKEN }} repository: ossf/osv-schema - ref: 719ef525491260972fbec8679130052d4086711c + ref: ed713ef6511fa4113c89e25ea5e3da5291c6f05d path: osv-schema - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 with: diff --git a/.github/workflows/validate-osv.yml b/.github/workflows/validate-osv.yml index 0bd3b8fdda..c7667988a6 100644 --- a/.github/workflows/validate-osv.yml +++ b/.github/workflows/validate-osv.yml @@ -18,3 +18,16 @@ jobs: go-version: "1.21" - name: Validate run: make validate + + + - name: Checkout ossf/osv-schema + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + with: + token: ${{ secrets.GH_TOKEN }} + repository: ossf/osv-schema + ref: ed713ef6511fa4113c89e25ea5e3da5291c6f05d + path: osv-schema + - name: Check against schema + run: | + go install github.com/santhosh-tekuri/jsonschema/cmd/jv@v0.7.0 + find osv -name "MAL-*.json" -exec jv osv-schema/validation/schema.json {} +