license + vulnerability tests

.github/workflows/build_tests.yml

@@ -21,29 +21,31 @@ on:
 
 jobs:
   build_tests:
+    strategy:
+      max-parallel: 2
+      matrix:
+        python-version: [ 3.7, 3.8, 3.9, "3.10" ]
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout from runner repo
-        uses: actions/checkout@v2
-        with:
-          ref: ${{ github.head_ref }}
-        if: github.event_name != 'pull_request'
-      - name: Checkout from PR origin repo
-        uses: actions/checkout@v2
-        with:
-          repository: ${{github.event.pull_request.head.repo.full_name}}
-          ref: ${{ github.head_ref }}
-        if: github.event_name == 'pull_request'
+      - uses: actions/checkout@v2
       - name: Setup Python
         uses: actions/setup-python@v1
         with:
-          python-version: 3.8
+          python-version: ${{ matrix.python-version }}
       - name: Install Build Tools
         run: |
           python -m pip install build wheel
+      - name: Install System Dependencies
+        run: |
+          sudo apt-get update
+          sudo apt install python3-dev swig libssl-dev
+      - name: Build Source Packages
+        run: |
+          python setup.py sdist
       - name: Build Distribution Packages
         run: |
           python setup.py bdist_wheel
       - name: Install package
         run: |
-          pip install .
+          pip install .[all]
+      - uses: pypa/gh-action-pip-audit@v1.0.0

.github/workflows/license_tests.yml

@@ -6,18 +6,13 @@ on:
   pull_request:
     branches:
       - dev
-    paths:
-      - 'requirements/**'
-      - 'setup.py'
   workflow_dispatch:
 
 jobs:
   license_tests:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-        with:
-          ref: ${{ github.head_ref }}
       - name: Setup Python
         uses: actions/setup-python@v1
         with:
@@ -32,12 +27,18 @@ jobs:
       - name: Install core repo
         run: |
           pip install .
-      - name: Install licheck
-        run: |
-          pip install git+https://github.com/NeonJarbas/lichecker
-      - name: Install test dependencies
+      - name: Get explicit and transitive dependencies
         run: |
-          pip install pytest pytest-timeout pytest-cov
-      - name: Test Licenses
-        run: |
-          pytest test/license_tests.py
+          pip freeze > requirements-all.txt
+      - name: Check python
+        id: license_check_report
+        uses: pilosus/action-pip-license-checker@v0.5.0
+        with:
+          requirements: 'requirements-all.txt'
+          fail: 'Copyleft,Other,Error'
+          fails-only: true
+          exclude: '^(tqdm).*'
+          exclude-license: '^(Mozilla).*$'
+      - name: Print report
+        if: ${{ always() }}
+        run: echo "${{ steps.license_check_report.outputs.report }}"