mirror of
https://github.com/ivuorinen/ghaw-auditor.git
synced 2026-03-18 15:02:15 +00:00
52 lines
1.2 KiB
YAML
52 lines
1.2 KiB
YAML
---
|
|
name: PR
|
|
|
|
on:
|
|
pull_request:
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
|
|
|
|
- uses: astral-sh/setup-uv@3259c6206f993105e3a61b142c2d97bf4b9ef83d # v7.1.0
|
|
|
|
- name: Install dependencies
|
|
run: uv sync --extra dev
|
|
|
|
- name: Run tests
|
|
run: uv run -m pytest --cov
|
|
|
|
- name: Lint
|
|
run: uvx ruff check .
|
|
|
|
- name: Type check
|
|
run: uv run mypy .
|
|
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
|
|
|
|
- uses: astral-sh/setup-uv@3259c6206f993105e3a61b142c2d97bf4b9ef83d # v7.1.0
|
|
|
|
- name: Install dependencies
|
|
run: uv sync
|
|
|
|
- name: Audit workflows
|
|
run: uv run ghaw-auditor scan --repo . --output audit-results
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Upload results
|
|
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
|
|
if: always()
|
|
with:
|
|
name: audit-results
|
|
path: audit-results/
|