build(deps): bump the github-actions group across 1 directory with 2 … #127

	name: Validate

	on:
	push:
	pull_request:

	permissions:
	contents: read

	jobs:
	schema:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
	with:
	python-version: "3.x"

	- name: Install check-jsonschema
	run: pip install check-jsonschema

	- name: Fetch OSV schema
	run: curl -sSfL -o osv-schema.json https://raw.githubusercontent.com/ossf/osv-schema/main/validation/schema.json

	- name: Validate advisories against OSV schema
	run: check-jsonschema --schemafile osv-schema.json advisories/*.json

	test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Set up Homebrew
	uses: Homebrew/actions/setup-homebrew@df4b09108a1de9d6f995fe68f302b3f68bd6d2ef # 2026.07.20.1

	- name: Set up Ruby
	uses: Homebrew/actions/setup-ruby@df4b09108a1de9d6f995fe68f302b3f68bd6d2ef # 2026.07.20.1

	- name: Run tests
	run: rake test

	# RuboCop is not run: the org-synced .rubocop.yml sets
	# `AllCops: Include: ["*/.rbi"]` which replaces (not extends) the
	# default .rb globs, so it scans nothing in this repository. Fix belongs
	# in the Homebrew/.github sync source.

Navigation Menu