{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://dpone.dev/schemas/cicd/ci-shadow-bundle-v1.schema.json",
  "title": "dpone.ci-shadow-bundle.v1",
  "type": "object",
  "additionalProperties": false,
  "required": ["schema_version", "files"],
  "properties": {
    "schema_version": {"const": "dpone.ci-shadow-bundle.v1"},
    "files": {
      "type": "array", "minItems": 1, "uniqueItems": true,
      "items": {
        "type": "object", "additionalProperties": false, "required": ["path", "role", "sha256"],
        "properties": {
          "path": {"type": "string", "pattern": "^(?!/)(?!.*\\.\\./)[A-Za-z0-9._/-]+$"},
          "role": {"enum": ["TRUST_CORE", "EXECUTION_WORKFLOW", "SUBJECT_INPUT"]},
          "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
        }
      }
    }
  }
}