ci: retire redundant scorecard.yml (superseded by scorecard-enforcer.… #46
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-License-Identifier: MPL-2.0 | |
| # registry-verify — fail the build if the spec registry or the DERIVED | |
| # topology map has drifted from the file tree. This is the in-repo half of | |
| # the drift-detection loop (the estate half is Hypatia rule HYP-S006). | |
| name: Registry Verify | |
| on: | |
| push: | |
| branches: [ main, master ] | |
| pull_request: | |
| branches: [ main, master ] | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| verify: | |
| name: Registry + topology in sync | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| fetch-depth: 0 # full history so `git ls-files -s` hashes are stable | |
| - name: Verify registry + derived topology are current | |
| run: | | |
| bash scripts/build-registry.sh --check |