refactor: updates validate.yml for trestlebot migration from check_only

Signed-off-by: Jennifer Power <[email protected]>

.github/workflows/create-new.yml

@@ -22,7 +22,7 @@ jobs:
     name: Create profile
     runs-on: ubuntu-latest
     container:
-      image: quay.io/continuouscompliance/trestle-bot:v0.8.0
+      image: quay.io/continuouscompliance/trestle-bot:v0.9.0
     steps:
       - name: Generate app token
         uses: tibdex/[email protected]

.github/workflows/validate.yml

@@ -22,13 +22,19 @@ jobs:
       - name: Clone
         uses: actions/checkout@v4
       - name: Check profile
-        id: check-profile
+        id: check
         uses: RedHatProductSecurity/trestle-bot/actions/[email protected]
         with:
           markdown_path: "markdown/profiles"
           oscal_model: "profile"
-          check_only: true
           skip_items: "fedramp_rev5_high"
+          dry_run: true
+      - name: Fail
+        if: ${{ steps.check.outputs.changes == 'true' }}
+        uses: actions/github-script@v7
+        with:
+          script: |
+              core.setFailed('Changes detected. Manual intervention may be required.')
     
   call-autofix:
     needs: [test]