-
Notifications
You must be signed in to change notification settings - Fork 0
127 lines (127 loc) · 3.54 KB
/
ci.yml
File metadata and controls
127 lines (127 loc) · 3.54 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
name: CI
on:
push:
branches:
- main
- develop
pull_request:
branches:
- main
- develop
jobs:
test:
name: Test on Python ${{ matrix.python-version }}
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
python-version: ["3.11", "3.12"]
steps:
- uses: actions/checkout@v4
- name: Install uv
uses: astral-sh/setup-uv@v5
with:
enable-cache: true
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v5
with:
python-version: ${{ matrix.python-version }}
- name: Install dependencies
run: |
uv sync --all-groups
- name: Lint with ruff (if available)
run: |
uv run ruff check . || true
continue-on-error: true
- name: Run tests with pytest
run: |
uv run pytest tests/ -v --tb=short
- name: Generate coverage report
run: |
uv run pytest tests/ --cov=pythonruns --cov-report=xml --cov-report=html
continue-on-error: true
- name: Upload coverage to Codecov
uses: codecov/codecov-action@v4
with:
file: ./coverage.xml
flags: unittests
name: codecov-umbrella
continue-on-error: true
lint:
name: Code Quality
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install uv
uses: astral-sh/setup-uv@v5
with:
enable-cache: true
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.12"
- name: Install dependencies
run: |
uv sync --group dev
- name: Check code formatting with black
run: uv run black --check .
continue-on-error: true
- name: Check import sorting with isort
run: uv run isort --check-only .
continue-on-error: true
- name: Lint with ruff
run: uv run ruff check .
continue-on-error: true
- name: Type check with mypy
run: uv run mypy pythonruns/ --ignore-missing-imports
continue-on-error: true
security:
name: Security Scan
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install uv
uses: astral-sh/setup-uv@v5
with:
enable-cache: true
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.12"
- name: Install dependencies
run: |
uv sync
uv pip install --system safety bandit[toml]
- name: Check dependencies for security issues
run: uv run safety check --json || true
continue-on-error: true
- name: Run bandit security linter
run: uv run bandit -r pythonruns/ -f json || true
continue-on-error: true
build:
name: Build Package
runs-on: ubuntu-latest
needs: [test, lint]
steps:
- uses: actions/checkout@v4
- name: Install uv
uses: astral-sh/setup-uv@v5
with:
enable-cache: true
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.12"
- name: Install build dependencies
run: |
uv pip install --system build twine
- name: Build package
run: python -m build
- name: Check package with twine
run: twine check dist/*
- name: Upload artifacts
uses: actions/upload-artifact@v4
with:
name: dist-packages
path: dist/
retention-days: 7