python-package.yml

# This workflow will install Python dependencies, run tests and lint with a variety of Python versions
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions

name: Python package

on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ['3.8', '3.9', '3.10', '3.11', 3.12]
    services:
      redis:
        image: redis
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 6379:6379

    steps:
    - uses: actions/checkout@v2
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v2
      with:
        python-version: ${{ matrix.python-version }}
        cache: 'pip'
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip setuptools wheel
        if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
    - name: Test with pytest
      run: pytest --verbose --cov-config=.coveragerc --cov=pottery --cov=tests
    - name: Type check with Mypy
      run: mypy
    - name: Lint with Flake8 and isort
      run: |
        flake8 *\.py pottery/*\.py tests/*\.py --count --max-complexity=10 --statistics
        isort *\.py pottery/*\.py tests/*\.py --check-only --diff
    - name: Check for security vulnerabilities with Bandit and Safety
      run: |
        bandit --recursive pottery
        safety check --file requirements.txt