ci: validate advisories against OSV JSON schema (#37)

This will help ensure that we're generating valid advisories - while the
schema is publically available, I've gone with committing a copy of it
to the codebase instead of downloading it since that's a bit simpler and
there's a chance we might need to patch it for a period

Author: G-Rath

.github/workflows/ci.yml

@@ -61,6 +61,21 @@ jobs:
       - run: pipx install poetry~=2.0
       - run: poetry install
       - run: poetry run pytest
+  validate:
+    permissions:
+      contents: read # to fetch (actions/checkout)
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
+        with:
+          python-version-file: '.python-version'
+      - run: pipx install poetry~=2.0
+      - run: poetry install
+      - run: poetry run scripts/validate_advisories.py
   prettier:
     permissions:
       contents: read # to fetch (actions/checkout)

.prettierrc.json

@@ -11,5 +11,11 @@
   "endOfLine": "lf",
   "arrowParens": "avoid",
   "trailingComma": "none",
-  "htmlWhitespaceSensitivity": "ignore"
+  "htmlWhitespaceSensitivity": "ignore",
+  "overrides": [
+    {
+      "files": "schema.json",
+      "options": { "parser": "json-stringify" }
+    }
+  ]
 }