Accept compiled branch pin organizations

Author: coenttb

Sources/GitHub Continuous Integration Validation/GitHub.ContinuousIntegration.Validation.BranchPins.swift

@@ -41,22 +41,39 @@ extension GitHub.ContinuousIntegration.Validation {
         /// invocation wants; a sweep over a foreign checkout names it.
         public let organizationsFile: String?
 
+        /// A caller-supplied organization set. This is the compiled-control
+        /// path: the Institute policy owner can provide its typed set directly
+        /// without recreating the retired YAML transport beside the subject.
+        public let organizations: Organizations?
+
         /// The burn-down ledger. `nil` is an empty ledger.
         public let baselineFile: String?
 
         public init(organizationsFile: String? = nil, baselineFile: String? = nil) {
             self.organizationsFile = organizationsFile
+            self.organizations = nil
+            self.baselineFile = baselineFile
+        }
+
+        public init(organizations: Organizations, baselineFile: String? = nil) {
+            self.organizationsFile = nil
+            self.organizations = organizations
             self.baselineFile = baselineFile
         }
 
         public func findings(in subject: Subject) throws(EnvironmentDefect) -> [Finding] {
-            let manifestPath =
-                organizationsFile
-                ?? Organizations.locateManifest(startingAt: subject.root)
-            guard let manifestPath else {
-                throw .missingSupportFile(path: Organizations.manifestPath)
+            let organizations: Organizations
+            if let supplied = self.organizations {
+                organizations = supplied
+            } else {
+                let manifestPath =
+                    organizationsFile
+                    ?? Organizations.locateManifest(startingAt: subject.root)
+                guard let manifestPath else {
+                    throw .missingSupportFile(path: Organizations.manifestPath)
+                }
+                organizations = try Organizations.read(at: manifestPath)
             }
-            let organizations = try Organizations.read(at: manifestPath)
             let baseline = try Baseline.read(at: baselineFile)
 
             var findings: [Finding] = []

Tests/GitHub Continuous Integration Validation Tests/GitHub.ContinuousIntegration.Validation.BranchPins Tests.swift

@@ -37,6 +37,20 @@ struct CIValidationBranchPinsTests {
         )
     }
 
+    @Test func `a supplied organization set needs no support manifest`() throws {
+        let repository = TemporaryRepository(repository: "example-organization-one/consumer")
+        repository.write(
+            Self.pinnedManifest(#"branch: "develop""#),
+            to: "Package.swift"
+        )
+        let validator = GitHub.ContinuousIntegration.Validation.BranchPins(
+            organizations: .init(names: ["example-organization-one"]))
+
+        let findings = try validator.findings(in: repository.subject)
+
+        #expect(findings.map(\.rule) == ["BRANCH-PIN-001"])
+    }
+
     @Suite
     struct `Baseline Contract` {
         @Test func `an unbaselined pin fires the rule`() throws {