Regenerate advisories #180

	name: Validate

	on:
	push:
	pull_request:

	permissions:
	contents: read

	jobs:
	schema:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
	with:
	python-version: "3.x"

	- name: Install check-jsonschema
	run: pip install check-jsonschema

	- name: Fetch OSV schema
	run: curl -sSfL -o osv-schema.json https://raw.githubusercontent.com/ossf/osv-schema/main/validation/schema.json

	- name: Validate advisories against OSV schema
	run: check-jsonschema --schemafile osv-schema.json advisories/*.json

	test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Set up Homebrew
	uses: Homebrew/actions/setup-homebrew@fd832223f9f99ebf0244dd20658680e5d4aca049 # 2026.08.03.2

	- name: Set up Ruby
	uses: Homebrew/actions/setup-ruby@fd832223f9f99ebf0244dd20658680e5d4aca049 # 2026.08.03.2
	with:
	bundler-cache: true

	- name: Run tests
	run: bundle exec rake spec

	# RuboCop is not run: the org-synced .rubocop.yml sets
	# `AllCops: Include: ["*/.rbi"]` which replaces (not extends) the
	# default .rb globs, so it scans nothing in this repository. Fix belongs
	# in the Homebrew/.github sync source.

Navigation Menu