chore(deps): update codecov/codecov-action action to v5.4.3

.copier-answers.yml

@@ -1,4 +1,4 @@
-_commit: v0.8.9
+_commit: v0.16.12
 _src_path: gh:helmut-hoffer-von-ankershoffen/oe-python-template
 attestations_enabled: false
 author_email: helmut@aignostics.com
@@ -24,4 +24,7 @@ readthedocs_domain: readthedocs.org
 readthedocs_project_key: aignostics
 sonarqube_key: aignostics_python-sdk
 streamlit_project_key: aignostics
+uptime_badge_snippet: '[![Better Stack Badge](https://uptime.betterstack.com/status-badges/v1/monitor/1vtu1.svg)](https://aignostics.betteruptime.com/)'
+vercel_badge_snippet: ''
 vercel_function_enabled: false
+

.dockerignore

@@ -0,0 +1,96 @@
+# .dockerignore of project Aignostics Python SDK
+
+# .dockerfile specifics
+
+**/.git
+**/.gitignore
+Dockerfile
+docker-compose.yml
+
+# Environment
+**/.env
+**/.env.backup
+**/.env.bak
+**/ENV/
+**/env/
+**/.envrc
+
+## secrets
+**/.secret
+**/.secrets
+**/.secrets.toml
+**/.secrets.yaml
+**/.secrets.yml
+**/.secrets.json
+**/.act-env-secret
+
+# More secrets
+**/.ssh
+**/.aws
+
+# Python virtual environment
+**/venv/
+**/.venv/
+
+# Python temps
+**/*.py[cdo]
+**/__pycache__/
+**/*.so
+**/*.egg
+**/*.egg-info/
+**/*.log
+**/dist/
+**/build/
+**/eggs/
+**/parts/
+**/sdist/
+**/develop-eggs/
+**/.installed.cfg
+**/.Python
+**/.pytest_cache/
+**/.ruff_cache/
+**/.nox
+**/.dmypy.json
+**/.mypy_cache/
+**/.coverage
+**/.coverage.*
+
+
+# Build Report
+**/reports/*
+**/!reports/.keep
+**/!reports/README.md
+
+# IDE
+**/.idea/
+**/*.swp
+**/*.swo
+
+# macOS
+**/.DS_Store
+
+# Other OS
+**/lib/
+**/lib64/
+
+# Data
+**/var/
+**/tmp/
+
+# Node temps
+**/node_modules/
+
+# AI workflow
+**/.fixme
+
+# Copier
+**/*.rej
+
+# Vercel
+**/.vercel
+
+# Scalene
+profile.json
+profile.html
+
+# Application specific

.env.example

@@ -1 +1,19 @@
-OE_PYTHON_TEMPLATE_LANGUAGE=de_DE
+ENV=local
+AIGNOSTICS_SYSTEM_TOKEN=YOUR_SECRET_TOKEN
+AIGNOSTICS_LOG_LEVEL=INFO
+AIGNOSTICS_LOG_FILE_ENABLED=false
+AIGNOSTICS_LOG_FILE_NAME=aignostics.log
+AIGNOSTICS_LOG_CONSOLE_ENABLED=false
+AIGNOSTICS_LOGFIRE_TOKEN=YOUR_LOGFIRE_TOKEN
+AIGNOSTICS_LOGFIRE_INSTRUMENT_SYSTEM_METRICS=true
+AIGNOSTICS_SENTRY_DSN=YOUR_SENTRY_DSN
+AIGNOSTICS_SENTRY_DEBUG=false
+AIGNOSTICS_SENTRY_SEND_DEFAULT_PII=false
+AIGNOSTICS_SENTRY_MAX_BREADCRUMBS=5
+AIGNOSTICS_SENTRY_SAMPLE_RATE=1.0
+AIGNOSTICS_SENTRY_TRACES_SAMPLE_RATE=1.0
+AIGNOSTICS_SENTRY_PROFILES_SAMPLE_RATE=1.0
+AIGNOSTICS_API_ROOT=https://platform.aignostics.com
+AIGNOSTICS_CLIENT_ID_DEVICE=YOUR_CLIENT_ID_DEVICE_RETRIEVED_FROM_DASHBOARD
+AIGNOSTICS_CLIENT_ID_INTERACTIVE=YOUR_CLIENT_ID_INTERACTIVE_RETRIEVED_FROM_DASHBOARD
+GOOGLE_APPLICATION_CREDENTIALS=..../gcp-credentials.json

.github/workflows/_audit.yml

@@ -0,0 +1,49 @@
+name: "Audit"
+
+on:
+  workflow_call:
+    # No inputs needed at this time
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+      packages: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@f94ec6bedd8674c4426838e6b50417d36b6ab231 # v5.3.1
+        with:
+          version: "0.6.3"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+
+      - name: Install dev tools
+        shell: bash
+        run: .github/workflows/_install_dev_tools.bash
+
+      - name: Install Python, venv and dependencies
+        run: uv sync --all-extras --frozen --link-mode=copy
+
+      - name: Audit
+        run: make audit
+
+      - name: Upload audit results
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }}
+        with:
+          name: audit-results
+          path: |
+            reports/sbom.json
+            reports/sbom.spdx
+            reports/licenses.csv
+            reports/licenses.json
+            reports/licenses_grouped.json
+            reports/vulnerabilities.json
+          retention-days: 30

.github/workflows/_docker-publish.yml

@@ -0,0 +1,121 @@
+name: "Publish Docker Image"
+
+on:
+  workflow_call:
+    # No inputs needed at this time
+
+jobs:
+  docker_publish:
+    runs-on: ubuntu-latest
+    permissions:
+      attestations: write
+      contents: read
+      id-token: write
+      packages: write
+
+    env:
+      DOCKER_IO_REGISTRY: docker.io
+      DOCKER_IO_IMAGE_NAME_ALL: helmuthva/aignostics-python-sdk
+      DOCKER_IO_IMAGE_NAME_SLIM: helmuthva/aignostics-python-sdk-slim
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Install dev tools
+        shell: bash
+        run: .github/workflows/_install_dev_tools.bash
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        with:
+
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+
+
+      - name: Log in to GitHub container registry
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        with:
+          registry: ghcr.io
+
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+
+      - name: "(all target): Extract metadata (tags, labels) for Docker"
+        id: meta-all
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        with:
+
+
+          images: |
+            ${{ env.DOCKER_IO_IMAGE_NAME_ALL }}
+            ghcr.io/${{ github.repository }}
+
+
+
+          tags: |
+            # set latest tag for releases
+            type=raw,value=latest
+            # set semver tags from git tags (v1.2.3 -> 1.2.3, 1.2, 1)
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+
+
+      - name: "(slim target): Extract metadata (tags, labels) for Docker"
+        id: meta-slim
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        with:
+
+
+          images: |
+            ${{ env.DOCKER_IO_IMAGE_NAME_SLIM }}
+            ghcr.io/${{ github.repository }}-slim
+
+
+
+          tags: |
+            # set latest tag for releases
+            type=raw,value=latest
+            # set semver tags from git tags (v1.2.3 -> 1.2.3, 1.2, 1)
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+
+
+
+      - name: "(all target): Build and push Docker image"
+        id: build-and-push-all
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
+        with:
+          context: .
+          file: ./Dockerfile
+          target: all
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta-all.outputs.tags }}
+          labels: ${{ steps.meta-all.outputs.labels }}
+
+
+
+      - name: "(slim target): Build and push Docker image"
+        id: build-and-push-slim
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
+        with:
+          context: .
+          file: ./Dockerfile
+          target: slim
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta-slim.outputs.tags }}
+          labels: ${{ steps.meta-slim.outputs.labels }}

.github/workflows/_install_dev_tools.bash

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+set -e  # Exit immediately if a command exits with a non-zero status
+set -o pipefail  # Return value of a pipeline is the value of the last command to exit with a non-zero status
+
+# Log function for better debugging
+log() {
+    echo "[$(date +'%Y-%m-%dT%H:%M:%S%z')] $*"
+}
+
+log "Starting installation of development tools..."
+
+wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
+echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
+sudo apt-get update
+sudo apt-get install --no-install-recommends -y curl gnupg2 imagemagick jq trivy xsltproc
+
+.github/workflows/_install_dev_tools_project.bash
+
+log "Completed installation of development tools."

.github/workflows/_install_dev_tools_project.bash

@@ -0,0 +1,16 @@
+#!/bin/bash
+
+set -e # Exit immediately if a command exits with a non-zero status
+set -o pipefail # Return value of a pipeline is the value of the last command to exit with a non-zero status
+
+# Log function for better debugging
+log() {
+echo "[$(date +'%Y-%m-%dT%H:%M:%S%z')] $*"
+}
+
+log "Starting installation of development tools specific to Aignostics Python SDK..."
+
+# Add your project specific installation commands below
+# sudo apt-get install --no-install-recommends -y YOUR_PACKAGE
+
+log "Completed installation of development tools specific to Aignostics Python SDK."

.github/workflows/_lint.yml

@@ -0,0 +1,35 @@
+name: "Lint"
+
+on:
+  workflow_call:
+    # No inputs needed at this time
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+      packages: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@f94ec6bedd8674c4426838e6b50417d36b6ab231 # v5.3.1
+        with:
+          version: "0.6.3"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+
+      - name: Install dev tools
+        shell: bash
+        run: .github/workflows/_install_dev_tools.bash
+
+      - name: Install Python, venv and dependencies
+        run: uv sync --all-extras --frozen --link-mode=copy
+
+      - name: Lint
+        run: make lint