Description
Today's Schema Consistency Checker finding (missing secret-scanning-alerts in the permissions schema enum, discussion #54737) is the kind of drift that has recurred before between pkg/workflow/permissions.go's permission constants and pkg/parser/schemas/main_workflow_schema.json's $defs.github_actions_permissions. Add a regression test/check that diffs the two so new permission constants can't ship without a matching schema entry.
Expected Impact
Prevents this exact class of schema/parser drift from recurring — a one-time investment that removes a whole category of future Schema Consistency Checker findings.
Suggested Agent
New Agent / general-purpose — add a Go test that enumerates permissions.go constants and asserts each has a corresponding schema enum entry.
Estimated Effort
Quick (< 1 hour)
Data Source
DeepReport analysis of Schema Consistency Checker report (discussion #54737, 2026-08-22), Recommendation #5.
Generated by 🔬 Deep Report · agent · 109.8 AIC · ⌖ 8.86 AIC · ⊞ 12.4K · ◷
Description
Today's Schema Consistency Checker finding (missing
secret-scanning-alertsin the permissions schema enum, discussion #54737) is the kind of drift that has recurred before betweenpkg/workflow/permissions.go's permission constants andpkg/parser/schemas/main_workflow_schema.json's$defs.github_actions_permissions. Add a regression test/check that diffs the two so new permission constants can't ship without a matching schema entry.Expected Impact
Prevents this exact class of schema/parser drift from recurring — a one-time investment that removes a whole category of future Schema Consistency Checker findings.
Suggested Agent
New Agent / general-purpose — add a Go test that enumerates
permissions.goconstants and asserts each has a corresponding schema enum entry.Estimated Effort
Quick (< 1 hour)
Data Source
DeepReport analysis of Schema Consistency Checker report (discussion #54737, 2026-08-22), Recommendation #5.