buf.yml

# This file is part of Dependency-Track.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# SPDX-License-Identifier: Apache-2.0
# Copyright (c) OWASP Foundation. All Rights Reserved.
name: Buf

on:
  pull_request:
    branches:
    - main
    - "feature-**"

permissions: { }

jobs:
  buf:
    name: Buf
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
    - name: Checkout Repository
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # tag=v4.2.2
    - name: Setup buf
      uses: bufbuild/buf-setup-action@9672cee01808979ea1249f81d6d321217b9a10f6 # tag=v1.47.2
      with:
        github_token: ${{ github.token }}
    - name: Lint Protobuf
      uses: bufbuild/buf-lint-action@06f9dd823d873146471cfaaf108a993fe00e5325 # tag=v1.1.1
      with:
        input: src/main/proto
    - name: Detect Breaking Changes
      uses: bufbuild/buf-breaking-action@c57b3d842a5c3f3b454756ef65305a50a587c5ba # tag=v1.1.4
      with:
        input: src/main/proto
        against: "https://github.com/${{ github.repository }}.git#branch=${{ github.base_ref }},subdir=src/main/proto"