fix: reject malformed link audit reports #1

	name: Validate

	on:
	pull_request:
	push:
	branches:
	- master

	permissions:
	contents: read

	concurrency:
	group: validate-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	validate:
	runs-on: ubuntu-latest
	timeout-minutes: 20
	steps:
	- name: Check out repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	- name: Set up Python
	uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
	with:
	python-version-file: ".python-version"
	cache: pip

	- name: Install Python dependencies
	run: python -m pip install --disable-pip-version-check -r requirements-dev.lock.txt

	- name: Run tests
	run: python -m pytest

	- name: Validate catalog
	run: python tools/validate_catalog.py

	- name: Set up Ruby and Bundler
	uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
	with:
	bundler-cache: true

	- name: Build Jekyll site
	run: bundle exec jekyll build

	- name: Verify catalog output escaping
	run: bundle exec ruby tests/render_security_test.rb

Navigation Menu