ci: run native OpenSpec and local link validation in verify (WealthLedger/specs#2)
Specs security / security (push) Successful in 8s
Specs verify / verify (push) Successful in 15s

npm run validate: toolchain check, openspec schema validate, openspec validate --all --strict, lychee --offline --include-fragments for root *.md and openspec/specs. CI verify installs the pinned CLI and sha256-pinned lychee and runs it.

Closes #2
This commit was merged in pull request #73.
This commit is contained in:
2026-11-02 21:06:17 +03:00
parent 7f73de76ac
commit 1fd7e6ad97
4 changed files with 33 additions and 10 deletions
+17
View File
@@ -34,3 +34,20 @@ jobs:
fi
echo "Checked revision: $(git rev-parse HEAD); range: $range"
git diff --check "$range"
- uses: https://github.com/actions/setup-node@v4
with:
node-version-file: .nvmrc
- name: Install pinned OpenSpec CLI and lychee 0.24.2
run: |
npm install -g "@fission-ai/openspec@$(cat openspec/.cli-version)"
openspec store register .
curl --fail --location --silent --show-error https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-unknown-linux-gnu.tar.gz -o /tmp/lychee.tar.gz
echo '1f4e0ef7f6554a6ed33dd7ac144fb2e1bbed98598e7af973042fc5cd43951c9a /tmp/lychee.tar.gz' | sha256sum --check
tar -xzf /tmp/lychee.tar.gz -C /tmp
echo /tmp/lychee-x86_64-unknown-linux-gnu >> "$GITHUB_PATH"
env:
OPENSPEC_TELEMETRY: '0'
- name: Validate schemas, specs, changes and local links
run: npm run validate
env:
OPENSPEC_TELEMETRY: '0'