feat: Add Markdown parser and CI validation workflow

[edonadei]

Summary

This PR operationalizes the JSON schemas established in PR #<NUMBER_OF_FIRST_PR> by introducing a Python-based Markdown parser and an automated GitHub Actions CI workflow.

The core script (scripts/schema_parser.py) reads the YAML frontmatter from all technique and mitigation Markdown files, validates their structure against the corresponding JSON schemas, and (on success) generates complete techniques.json and mitigations.json index files.

The CI workflow (.github/workflows/main.yml) runs this parser on every pull request to main, ensuring that all contributed content is valid before it can be merged.

This is Part 2 of a multi-PR initiative to address issue #48.

Type of Contribution

• Infrastructure/Tooling
• New feature

What's Included

1. scripts/schema_parser.py
   • A new Python script that:
     • Loads the JSON schemas (from PR feat(techniques): add SAFE-T1109 debugging tool exploitation (CVE-2025-49596) #1).
     • Validates the schemas themselves against the Draft 7 standard.
     • Parses the YAML frontmatter from all .md files in the techniques/ and mitigations/ directories.
     • Validates the extracted frontmatter against the loaded schemas.
     • Generates output/techniques.json and output/mitigations.json.
2. .github/workflows/main.yml
   • A new GitHub Actions workflow that:
     • Triggers on push and pull_request events to the main branch.
     • Sets up Python and installs dependencies from requirements.txt.
     • Runs the schema_parser.py script to validate all content.
3. requirements.txt
   • Adds Python dependencies: jsonschema (for validation) and PyYAML (for parsing frontmatter).

Key Features

• CI Validation: All pull requests are now automatically checked for schema compliance.
• Data Integrity: Enforces the data contract, ensuring all techniques and mitigations have valid metadata.
• Automated Parsing: Provides the core logic for turning the Markdown-based content into structured JSON data.
• Error Reporting: The script will fail the CI build and report errors if a file's metadata is invalid, blocking bad merges.

Benefits

This PR provides the critical feedback loop for the data contract. It:

• Guarantees that all data in the repository is valid and consistent.
• Automates the validation process, removing the need for manual review of metadata.
• Lays the foundation for all future tooling (dashboards, APIs, etc.) by providing a reliable way to generate structured JSON from the content.

Multi-PR Roadmap

• feat: add JSON Schema definitions for programmatic access #100 : Schema definitions
• feat: Add Markdown parser and CI validation workflow #101 (this) : Markdown parser + CI automation (GitHub Actions)
• Not yet: TOON token-efficient format generator for LLM optimization
• Not yet: Documentation and README updates

Checklist

• DCO sign-off included in commits (git commit -s)
• CI workflow triggers correctly on pull requests to main.
• Parser script successfully validates all existing technique and mitigation files.
• requirements.txt is complete.
• Script handles file read/write operations and directory creation.

Related Issues

Related: #48 - Create JSON/YAML index of SAFE-MCP techniques