zarf-lint.yaml

name: Zarf Lint

on:
  pull_request:
    branches:
      - "main"
    paths:
      - "**/zarf.yaml"
      - ".github/workflows/zarf-lint.yaml"

concurrency:
  group: zarf-lint-${{ github.ref }}
  cancel-in-progress: true

jobs:
  zarf-lint:
    runs-on: ubuntu-latest
    name: Lint Zarf Manifest

    permissions:
      contents: read

    steps:
      - name: Checkout Repo
        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0

      - name: Set up Python
        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
        with:
          python-version-file: "pyproject.toml"

      - name: Download Zarf Package Schema
        # TODO: renovate setup
        run: curl -o zarf.schema.json https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.14.0/zarf.schema.json

      - name: Install jsonschema
        run: pip install check-jsonschema==0.28.0

      - name: Validate API zarf.yaml
        if: always()
        run: |
          check-jsonschema packages/api/zarf.yaml --schemafile zarf.schema.json

      - name: Validate llama-cpp-python zarf.yaml
        if: always()
        run: |
          check-jsonschema packages/llama-cpp-python/zarf.yaml --schemafile zarf.schema.json

      - name: Validate repeater zarf.yaml
        if: always()
        run: |
          check-jsonschema packages/repeater/zarf.yaml --schemafile zarf.schema.json

      - name: Validate supabase zarf.yaml
        if: always()
        run: |
          check-jsonschema packages/supabase/zarf.yaml --schemafile zarf.schema.json

      - name: Validate text-embeddings zarf.yaml
        if: always()
        run: |
          check-jsonschema packages/text-embeddings/zarf.yaml --schemafile zarf.schema.json

      - name: Validate UI zarf.yaml
        if: always()
        run: |
          check-jsonschema packages/ui/zarf.yaml --schemafile zarf.schema.json

      - name: Validate vllm zarf.yaml
        if: always()
        run: |
          check-jsonschema packages/vllm/zarf.yaml --schemafile zarf.schema.json

      - name: Validate whisper zarf.yaml
        if: always()
        run: |
          check-jsonschema packages/whisper/zarf.yaml --schemafile zarf.schema.json