via/alice-sdv-product Private

12345678910111213141516171819202122232425262728293031323334353637

name: Verify ALICE product baselineon:  push:    branches: [main]  pull_request:jobs:  verify:    runs-on: ubuntu-latest    steps:      - uses: actions/checkout@v4      - name: Validate product documents        run: |          python -m json.tool .asw/product.json >/dev/null          python -m json.tool product/baseline.json >/dev/null          python -m json.tool product/release-index.json >/dev/null          find product/releases approvals/releases -name '*.json' -exec python -m json.tool {} \; >/dev/null          python -m json.tool quality/gates.json >/dev/null          python -m json.tool approvals/policy.json >/dev/null      - name: Validate ALICE pinned revision        run: python -c 'import json; d=json.load(open("product/baseline.json")); c=d["components"]; assert len(c)==1; assert c[0]["repository"]=="via/alice-sdv-demo"; assert len(c[0]["commitSha"])==40'      - name: Build Audit Package skeleton        run: |          mkdir -p dist/audit-package/manifest dist/audit-package/quality dist/audit-package/approvals          cp product/baseline.json dist/audit-package/manifest/product-baseline.json          cp quality/gates.json dist/audit-package/quality/quality-gates.json          cp approvals/policy.json dist/audit-package/approvals/approval-policy.json          cp audit/package-layout.json dist/audit-package/package-layout.json          find dist/audit-package -type f -exec sha256sum {} + > dist/audit-package/checksums.sha256      - name: Upload ALICE Audit Package skeleton        uses: christopherhx/gitea-upload-artifact@v4        with:          name: alice-product-audit-package          path: dist          retention-days: 30