build-test-common-helper.yaml

name: Build-Test

on:
  push:
    paths:
      - .github/workflows/build-test-common-helper.yaml
      - '**.py'
      - '**/requirements*.txt'

defaults:
  run:
    shell: bash

jobs:
  security:
    name: Run Snyk to check for vulnerabilities
    if: ${{ github.ref == 'refs/heads/main' }}
    runs-on: ubuntu-latest
    steps:
      - name: Checkout sources
        uses: actions/checkout@master

      - name: Run Snyk to check for vulnerabilities
        uses: snyk/actions/python-3.8@master
        continue-on-error: true  # To make sure that SARIF upload gets called
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          args: --all-projects --severity-threshold=high --sarif-file-output=snyk.sarif

      - name: Upload result to GitHub Code Scanning
        uses: github/codeql-action/upload-sarif@v2
        with:
          sarif_file: snyk.sarif

  build:
    name: Build and test
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: [3.8, 3.9, "3.10", 3.11]
    steps:
      - name: Checkout sources
        uses: actions/checkout@master

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v4
        with:
          python-version: ${{ matrix.python-version }}

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip virtualenv setuptools tox
          pip install -r _common/requirements-build.txt

      - name: Set tox setting
        id: ToxSetting
        run: |
          if [[ "${{ matrix.python-version }}" == "3.8" ]]
          then
            echo "toxenv=py38" >> $GITHUB_OUTPUT
          elif [[ "${{ matrix.python-version }}" == "3.9" ]]
          then
            echo "toxenv=py39" >> $GITHUB_OUTPUT
          elif [[ "${{ matrix.python-version }}" == "3.10" ]]
          then
            echo "toxenv=py310" >> $GITHUB_OUTPUT
          else
            echo "toxenv=py311" >> $GITHUB_OUTPUT
          fi

      - name: Test with tox
        run: |
          cd _common
          tox -r -e ${{ steps.ToxSetting.outputs.toxenv }}

      - name: Upload coverage reports to Codecov
        run: |
          # Replace `linux` below with the appropriate OS
          # Options are `alpine`, `linux`, `macos`, `windows`
          curl -Os https://uploader.codecov.io/latest/linux/codecov
          chmod +x codecov
          ./codecov -t ${CODECOV_TOKEN}