static-analysis.yml

name: Static Analysis

on:
  pull_request:
  push:
    branches:
      - main

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  analyze:
    name: Analyze
    if: github.actor != 'dependabot[bot]'
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - name: 🛎 Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ github.head_ref }}
          token: ${{ secrets.WORKFLOW_COMMIT_TOKEN }}

      - name: 🥚 Install Hatch
        uses: pypa/hatch@install

      - name: 📝 Format Code
        run: hatch fmt

      - name: ✅ Commit code format changes
        if: github.ref != 'refs/heads/main'
        uses: stefanzweifel/git-auto-commit-action@v5
        with:
          commit_message: "chore: Format code"
          skip_fetch: true
          skip_checkout: true

      - name: 📤 PR code format changes
        if: github.ref == 'refs/heads/main'
        uses: peter-evans/create-pull-request@v7
        with:
          token: ${{ secrets.PR_TOKEN }}
          commit-message: "chore: Format code"
          title: "chore: Format code"
          branch: "format-code"
          delete-branch: true
  
  type-check:
    name: Type Check
    if: github.actor != 'dependabot[bot]'
    runs-on: ubuntu-latest
    
    steps:
      - name: 🛎 Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ github.head_ref }}

      - name: 🐍 Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.13'
          cache: 'pip'

      - name: 🥚 Install Hatch
        uses: pypa/hatch@install

      - name: 🔍 Type Check
        run: hatch run check