assemble-ssp.yml

name: Assemble SSPP updates

on:
  workflow_dispatch:
  push:
    branches: [ main ]

jobs:
  assemble_ssp:
    name: Assemble SSPP updates and save artifact
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Assemble final SSPP
        uses: ./.github/actions/trestle-cmd
        with:
          cmd: trestle assemble -n continuous_monitoring system-security-plan

      - name: Render final SSPP
        uses: ./.github/actions/trestle-cmd
        with:
          cmd: render-ssp

      # - name: Transform SSPP to PDF
      #   run: docker run --rm -u "$(id -u):$(id -g)" -v "$GITHUB_WORKSPACE/doc/compliance/oscal/ssp-render:/data" pandoc/latex continuous_monitoring_ssp.md -o continuous_monitoring_ssp.pdf

      - name: Save artifact
        uses: actions/upload-artifact@v4
        with:
          name: continuous_monitoring_SSPP
          path: |
            doc/compliance/oscal/dist/system-security-plans/continuous_monitoring.json
            doc/compliance/oscal/ssp-render/continuous_monitoring_ssp.md
            doc/compliance/oscal/ssp-render/continuous_monitoring_ssp.pdf