pre-submit.deployment-policy.yml

name: Pre submits deployment policy
on:
  pull_request:
    branches: ["main"]
  workflow_dispatch:

permissions: read-all

jobs:
  deployment:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0

      - name: Install policy engine
        uses: slsa-framework/slsa-policy/actions/installer@v0.0.1

      - name: Validate deployment policy
        working-directory: policies/deployment
        run: |
          set -euo pipefail
          slsa-policy deployment validate org.json .