[DMS-1156] Add package-backed standard schema selection by simpat-jesus · Pull Request #1017 · Ed-Fi-Alliance-OSS/Data-Management-Service

simpat-jesus · 2026-06-09T19:05:09Z

Summary

document and verify the DS-qualified asset-only ApiSchema package contract for DMS-1156
add package-backed standard schema selection (core-only); there is no -Extensions parameter — extension/custom schema sets use the expert -ApiSchemaPath filesystem path
add package resolver/catalog helpers and claims integration, with focused Pester coverage

Verification

pwsh -NoLogo -NoProfile -Command "Invoke-Pester -Path eng/docker-compose/tests/BootstrapPackageResolver.Tests.ps1 -PassThru"
pwsh -NoLogo -NoProfile -Command "Invoke-Pester -Path eng/docker-compose/tests/BootstrapStandardSchemaSelection.Tests.ps1 -PassThru"
pwsh -NoLogo -NoProfile -Command "Invoke-Pester -Path eng/docker-compose/tests/BootstrapSchemaAndSecuritySelection.Tests.ps1 -PassThru"
pwsh -NoLogo -NoProfile -Command "Invoke-Pester -Path eng/docker-compose/tests/BootstrapSeedDelivery.Tests.ps1 -PassThru"
git diff --check

@@ -0,0 +1,1034 @@
+# SPDX-License-Identifier: Apache-2.0


github-actions · 2026-06-11T20:31:50Z

🔍 Vulnerabilities of `dms-config:latest`

📦 Image Reference dms-config:latest

digest	`sha256:2fdabbd40f57284f6db562bf6518987e791394ab4d732152cbbbaca761beef7a`
vulnerabilities
platform	linux/amd64
size	80 MB
packages	426

📦 Base Image alpine:3

also known as	`3.23` `3.23.3` `latest`
digest	`sha256:59855d3dceb3ae53991193bd03301e082b2a7faa56a514b03527ae0ec2ce3a95`
vulnerabilities

musl 1.2.5-r21 (apk)

pkg:apk/alpine/musl@1.2.5-r21?os_name=alpine&os_version=3.23

Affected range	`<1.2.5-r23`
Fixed version	`1.2.5-r23`
EPSS Score	`0.020%`
EPSS Percentile	`6th percentile`

Description

Affected range	`<1.2.5-r22`
Fixed version	`1.2.5-r22`
EPSS Score	`0.006%`
EPSS Percentile	`0th percentile`

Description

zlib 1.3.1-r2 (apk)

pkg:apk/alpine/zlib@1.3.1-r2?os_name=alpine&os_version=3.23

Affected range	`<1.3.2-r0`
Fixed version	`1.3.2-r0`
EPSS Score	`0.006%`
EPSS Percentile	`0th percentile`

Description

Affected range	`<1.3.2-r0`
Fixed version	`1.3.2-r0`
EPSS Score	`0.009%`
EPSS Percentile	`1st percentile`

Description

busybox 1.37.0-r30 (apk)

pkg:apk/alpine/busybox@1.37.0-r30?os_name=alpine&os_version=3.23

Affected range	`<=1.37.0-r30`
Fixed version	Not Fixed
EPSS Score	`0.069%`
EPSS Percentile	`21st percentile`

Description

github-actions · 2026-06-11T20:31:58Z

🔍 Vulnerabilities of `dms:pr-test`

📦 Image Reference dms:pr-test

digest	`sha256:a29477afd5d048994f011cb0523e86296af5e7eb89d24185a261d1464d12c7b6`
vulnerabilities
platform	linux/amd64
size	101 MB
packages	458

📦 Base Image alpine:3

also known as	`3.23` `3.23.3` `latest`
digest	`sha256:59855d3dceb3ae53991193bd03301e082b2a7faa56a514b03527ae0ec2ce3a95`
vulnerabilities

github-actions · 2026-06-11T20:32:17Z

🔍 Vulnerabilities of `dms:latest`

📦 Image Reference dms:latest

digest	`sha256:c2bc0aac16e5c9e3cdf80d7e7b337f34f59e3e5ac4b6df8a01a19d6475756686`
vulnerabilities
platform	linux/amd64
size	101 MB
packages	458

📦 Base Image alpine:3

also known as	`3.23` `3.23.3` `latest`
digest	`sha256:59855d3dceb3ae53991193bd03301e082b2a7faa56a514b03527ae0ec2ce3a95`
vulnerabilities

jq 1.8.1-r0 (apk)

pkg:apk/alpine/jq@1.8.1-r0?os_name=alpine&os_version=3.23

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.025%`
EPSS Percentile	`8th percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.072%`
EPSS Percentile	`22nd percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.013%`
EPSS Percentile	`2nd percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.014%`
EPSS Percentile	`3rd percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.014%`
EPSS Percentile	`3rd percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.005%`
EPSS Percentile	`0th percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.013%`
EPSS Percentile	`2nd percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.013%`
EPSS Percentile	`2nd percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.013%`
EPSS Percentile	`2nd percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.020%`
EPSS Percentile	`6th percentile`

Description

Affected range	`<=1.8.1-r0`
Fixed version	Not Fixed
EPSS Score	`0.137%`
EPSS Percentile	`33rd percentile`

Description

musl 1.2.5-r21 (apk)

pkg:apk/alpine/musl@1.2.5-r21?os_name=alpine&os_version=3.23

Affected range	`<1.2.5-r23`
Fixed version	`1.2.5-r23`
EPSS Score	`0.020%`
EPSS Percentile	`6th percentile`

Description

Affected range	`<1.2.5-r22`
Fixed version	`1.2.5-r22`
EPSS Score	`0.006%`
EPSS Percentile	`0th percentile`

Description

zlib 1.3.1-r2 (apk)

pkg:apk/alpine/zlib@1.3.1-r2?os_name=alpine&os_version=3.23

Affected range	`<1.3.2-r0`
Fixed version	`1.3.2-r0`
EPSS Score	`0.006%`
EPSS Percentile	`0th percentile`

Description

Affected range	`<1.3.2-r0`
Fixed version	`1.3.2-r0`
EPSS Score	`0.009%`
EPSS Percentile	`1st percentile`

Description

busybox 1.37.0-r30 (apk)

pkg:apk/alpine/busybox@1.37.0-r30?os_name=alpine&os_version=3.23

Affected range	`<=1.37.0-r30`
Fixed version	Not Fixed
EPSS Score	`0.069%`
EPSS Percentile	`21st percentile`

Description

Rebased onto main (e31ba23 [DMS-1183]) by squashing the branch's 42 commits and two internal merge commits into a single commit. No content change beyond integrating main's OpenAPI change-query work; the only file touched by both sides (BootstrapSchemaAndSecuritySelection.Tests.ps1) merged cleanly. Co-authored-by: Jesus Flores <jesus@simpat.tech> Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

github-advanced-security AI found potential problems Jun 9, 2026

View reviewed changes

simpat-jesus force-pushed the DMS-1156 branch from 8259b89 to ca0c209 Compare June 9, 2026 20:00

simpat-jesus requested a review from a team as a code owner June 9, 2026 20:00

simpat-jesus force-pushed the DMS-1156 branch from 3197de1 to d47e089 Compare June 12, 2026 00:24

github-advanced-security AI found potential problems Jun 12, 2026

View reviewed changes

Comment thread eng/docker-compose/prepare-dms-schema.ps1 Fixed

simpat-jesus force-pushed the DMS-1156 branch from 19489b1 to 161384b Compare June 12, 2026 01:39

samuellugo-ship-it force-pushed the DMS-1156 branch from 6fdbac8 to 4c5491e Compare June 17, 2026 16:30

JBrenesSimpat approved these changes Jun 17, 2026

View reviewed changes

simpat-adam approved these changes Jun 17, 2026

View reviewed changes

samuellugo-ship-it force-pushed the DMS-1156 branch from 7d672f4 to 936a771 Compare June 18, 2026 05:44

samuellugo-ship-it merged commit aa27e4c into main Jun 18, 2026
49 checks passed

samuellugo-ship-it deleted the DMS-1156 branch June 18, 2026 06:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[DMS-1156] Add package-backed standard schema selection#1017

[DMS-1156] Add package-backed standard schema selection#1017
samuellugo-ship-it merged 1 commit into
mainfrom
DMS-1156

simpat-jesus commented Jun 9, 2026 •

edited by samuellugo-ship-it

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

github-actions Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

simpat-jesus commented Jun 9, 2026 • edited by samuellugo-ship-it Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Verification

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026

🔍 Vulnerabilities of dms-config:latest

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of dms:pr-test

Uh oh!

github-actions Bot commented Jun 11, 2026

🔍 Vulnerabilities of dms:latest

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

simpat-jesus commented Jun 9, 2026 •

edited by samuellugo-ship-it

Loading

🔍 Vulnerabilities of `dms-config:latest`

github-actions Bot commented Jun 11, 2026 •

edited

Loading

🔍 Vulnerabilities of `dms:pr-test`

🔍 Vulnerabilities of `dms:latest`