main.yml

name: Python package

on: [push, pull_request]

jobs:
  build:

    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ["3.7", "3.8", "3.9", "3.10", "3.11", "pypy-3.8"]

    steps:
    - uses: actions/checkout@v3
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v3
      with:
        python-version: ${{ matrix.python-version }}
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install .
        pip install -U coverage flake8
    - name: Run tests
      env:
        AWS_ACCESS_KEY_ID: fake-access-key-id
        AWS_SECRET_ACCESS_KEY: fake-secret-access-key
      run: |
        coverage run --include "flowlogs_reader/*.py" -m unittest
    - name: Check coverage
      run: |
        coverage report --show-missing --fail-under=99.0
    - name: Lint with flake8
      run: |
        flake8 .
    - name: Check formatting with black
      if: "matrix.python-version == '3.8'"
      run: |
        pip install -U black
        black --check .
    - name: Build packages
      if: "matrix.python-version == '3.8'"
      run: |
        pip install -U twine wheel build
        pyproject-build .
        twine check dist/*
    - name: Save packages as GitHub Actions artifacts
      if: "matrix.python-version == '3.8'"
      uses: actions/upload-artifact@v3
      with:
        name: flowlogs-reader-packages
        path: dist/

  publish:
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
    runs-on: ubuntu-latest
    needs:
      - build
    permissions:
      # https://docs.pypi.org/trusted-publishers/using-a-publisher/
      id-token: write
    steps:
    - uses: actions/checkout@v3
    - uses: actions/download-artifact@v4.1.7
      with:
        name: flowlogs-reader-packages
        path: dist/
    - name: Upload packages to PyPi
      uses: pypa/gh-action-pypi-publish@release/v1