metafarmers/fruit-thinning-pinching-robot Private

12345678910111213141516171819202122232425262728293031323334

name: Verify product baselineon:  push:    branches: [main]  pull_request:jobs:  verify:    runs-on: ubuntu-latest    steps:      - uses: actions/checkout@v4      - name: Validate product documents        run: |          python -m json.tool .asw/product.json >/dev/null          python -m json.tool product/baseline.json >/dev/null          python -m json.tool product/release-index.json >/dev/null          python -m json.tool approvals/releases/FRUIT-ROBOT-2026.08-R1.json >/dev/null      - name: Validate pinned revisions        run: python -c 'import json; d=json.load(open("product/baseline.json")); p=d["components"]+d.get("validationAssets",[]); assert p and all(len(x["commitSha"])==40 for x in p)'      - name: Build Audit Package skeleton        run: |          mkdir -p dist/audit-package/manifest dist/audit-package/quality dist/audit-package/approvals          cp product/baseline.json dist/audit-package/manifest/product-baseline.json          cp quality/gates.json dist/audit-package/quality/quality-gates.json          cp approvals/policy.json dist/audit-package/approvals/approval-policy.json          cp audit/package-layout.json dist/audit-package/package-layout.json          find dist/audit-package -type f -exec sha256sum {} + > dist/audit-package/checksums.sha256      - uses: christopherhx/gitea-upload-artifact@v4        with:          name: product-audit-package-skeleton          path: dist          retention-days: 30