From 0ead1bf8f193d22f813ec192b73e65f7b882a7f7 Mon Sep 17 00:00:00 2001 From: Rodrigo Lino da Costa Date: Tue, 1 Sep 2026 17:30:35 -0300 Subject: [PATCH 1/2] Pin SchemaStore workflow schemas --- scripts/validateWorkflowSchemas.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/scripts/validateWorkflowSchemas.sh b/scripts/validateWorkflowSchemas.sh index 0b12ac2..dfe183f 100755 --- a/scripts/validateWorkflowSchemas.sh +++ b/scripts/validateWorkflowSchemas.sh @@ -9,6 +9,7 @@ readonly SCRIPT_DIR source "$SCRIPT_DIR/shellUtils.sh" readonly REPO_ROOT="${REPO_ROOT:-.}" +readonly SCHEMASTORE_COMMIT="5c0bfe97efb759922f71c378584246cc07e7c3ed" title "Validating the Github Actions and workflows using the json schemas provided by (https://www.schemastore.org/json/)" @@ -17,10 +18,10 @@ TEMP_SCHEMA_DIR="$(mktemp -d)" readonly TEMP_SCHEMA_DIR trap 'rm -rf "$TEMP_SCHEMA_DIR"' EXIT -# Download the up-to-date json schemas for github actions and workflows +# Download the pinned json schemas for github actions and workflows for SCHEMA in github-action.json github-workflow.json; do info "Downloading $SCHEMA schema..." - if curl "https://raw.githubusercontent.com/SchemaStore/schemastore/refs/heads/master/src/schemas/json/$SCHEMA" --output "$TEMP_SCHEMA_DIR/$SCHEMA" --silent; then + if curl "https://raw.githubusercontent.com/SchemaStore/schemastore/$SCHEMASTORE_COMMIT/src/schemas/json/$SCHEMA" --output "$TEMP_SCHEMA_DIR/$SCHEMA" --silent; then success "Successfully downloaded $SCHEMA schema!" else error "Failed downloading $SCHEMA schema" >&2 From 5cf0f87f91d59704330547dca9fe0a45c111b020 Mon Sep 17 00:00:00 2001 From: Rodrigo Lino da Costa Date: Tue, 1 Sep 2026 17:32:17 -0300 Subject: [PATCH 2/2] Inline pinned SchemaStore commit --- scripts/validateWorkflowSchemas.sh | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/scripts/validateWorkflowSchemas.sh b/scripts/validateWorkflowSchemas.sh index dfe183f..202ff91 100755 --- a/scripts/validateWorkflowSchemas.sh +++ b/scripts/validateWorkflowSchemas.sh @@ -9,7 +9,6 @@ readonly SCRIPT_DIR source "$SCRIPT_DIR/shellUtils.sh" readonly REPO_ROOT="${REPO_ROOT:-.}" -readonly SCHEMASTORE_COMMIT="5c0bfe97efb759922f71c378584246cc07e7c3ed" title "Validating the Github Actions and workflows using the json schemas provided by (https://www.schemastore.org/json/)" @@ -21,7 +20,7 @@ trap 'rm -rf "$TEMP_SCHEMA_DIR"' EXIT # Download the pinned json schemas for github actions and workflows for SCHEMA in github-action.json github-workflow.json; do info "Downloading $SCHEMA schema..." - if curl "https://raw.githubusercontent.com/SchemaStore/schemastore/$SCHEMASTORE_COMMIT/src/schemas/json/$SCHEMA" --output "$TEMP_SCHEMA_DIR/$SCHEMA" --silent; then + if curl "https://raw.githubusercontent.com/SchemaStore/schemastore/5c0bfe97efb759922f71c378584246cc07e7c3ed/src/schemas/json/$SCHEMA" --output "$TEMP_SCHEMA_DIR/$SCHEMA" --silent; then success "Successfully downloaded $SCHEMA schema!" else error "Failed downloading $SCHEMA schema" >&2