python-check.yml

name: Python Check

on:
  pull_request:
    branches: [dev, main]
  workflow_dispatch:
    
jobs:
  python-check:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ['3.9', '3.10', '3.11', '3.12']

    steps:
      - uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}

      - name: Install Poetry
        run: |
          curl -sSL https://install.python-poetry.org | python3 -
        env:
          POETRY_HOME: ${{ github.workspace }}/.poetry
        working-directory: ./indexer

      - name: Add Poetry to PATH
        run: echo "${{ github.workspace }}/.poetry/bin" >> $GITHUB_PATH

      - name: Install dependencies using Poetry
        run: |
          poetry config virtualenvs.create false
          poetry install
        working-directory: ./indexer

      - name: Set PYTHONPATH
        run: echo "PYTHONPATH=${{ github.workspace }}/indexer/src" >> $GITHUB_ENV

      - name: Check import order with isort
        run: poetry run isort . --check-only
        working-directory: ./indexer

      - name: Format check with Black
        run: poetry run black --check . --config=pyproject.toml
        working-directory: ./indexer

      - name: Lint with flake8
        run: |
          poetry run flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
        working-directory: ./indexer

      - name: Security check with Bandit
        run: poetry run task bandit
        working-directory: ./indexer

      - name: Check with mypy
        run:  poetry run mypy . --explicit-package-bases 
        working-directory: ./indexer
        
      - name: Check Dependencies for Vulnerabilities
        run: poetry run run_safety
        working-directory: ./indexer

      - name: Run STAMP/SRC-20 Validations
        run: |
          poetry run python3 -m unittest discover -s . -p "test_src20.py"
        working-directory: ./indexer