Validation with `cue` is not working

[aaguiarz]

If you run

cue vet schema.cue .\SECURITY-INSIGHTS.yml

it does not properly enforce the schema, and successfully validates every file.

cue vet -d '#SecurityInsights'  schema.cue .\SECURITY-INSIGHTS.yml

works well.

Maybe a constraint needs to be added to the schema.cue file by just adding:

#SecurityInsights

[trumant]

https://github.com/ossf/security-insights/blob/main/Makefile#L6 demonstrates that we do use the working form of cue vet which specifies -d '#SecurityInsights'

I searched through the user facing documentation and couldn't find any guidance we are providing to use the non-working cue vet schema.cue .\SECURITY-INSIGHTS.yml form.

Is there a change you propose we make to the code or docs?

[aaguiarz]

Why not adding #SecurityInsights in the schema.cue?