validate-attributes-mapping.yml

name: Validate Attributes Mapping

on:
  push:
    branches:
      - master
  pull_request:
    branches:
      - master
  schedule:
    # Run daily at 06:00 UTC
    - cron: "0 6 * * *"

permissions:
  contents: read

jobs:
  validate-attributes:
    name: Validate Attributes
    runs-on: ubuntu-latest
    permissions:
      contents: read
    outputs:
      small_mismatches: ${{ steps.check_results.outputs.small_mismatches }}
    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
        with:
          egress-policy: audit

      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Set up Python
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.11"
      - name: Set up uv
        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
        with:
          version: "latest"
          enable-cache: true
      - name: Install dependencies
        run: |
          make requirements

      - name: Validate Attributes Mapping
        run: |
          uv run python scripts/validate_attributes_mapping.py