python_test.yml

name: Build

on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]

env:
  SEMGREP_R2C_INTERNAL_EXPLICIT_SEMGREPIGNORE: ./tests/assets/files/.semgrepignore

jobs:
  build:

    runs-on: ubuntu-latest
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest]
        python-version: ['3.10', '3.11', '3.12']

    steps:
    - uses: actions/checkout@v3
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v3
      with:
        python-version: ${{ matrix.python-version }}
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install tox poetry
    - name: Lint
      run: |
        tox -e lint
    - name: Install libsast
      run: |
        poetry install --no-interaction --no-ansi
    - name: Bandit Scan
      run: |
        poetry run bandit -ll libsast -r
    - name: Unit test
      run: |
        poetry run pytest -v --cache-clear tests
    - name: Python Package Test
      run: |
        tox -e build
    - name: Clean Up
      run: |
        tox -e clean