ci.yml

name: CI
on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]

  workflow_dispatch:
jobs:
  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ["3.9", "3.10", "3.11", "3.12"]
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install poetry
        run: pipx install poetry

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
          cache: 'poetry'

      - name: Install dependencies
        run: poetry install --no-root

      - name: Lint Code
        run: poetry run flake8 stwfsapy

      - name: Test Code
        run: poetry run pytest --cov=./ --cov-config=.coveragerc --cov-report=xml

      - name: Upload coverage
        uses: codecov/codecov-action@v4
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
        if: matrix.python-version == '3.9'

      - name: Look for security vulnerabilities in dependencies
        run: poetry run safety check --full-report
        continue-on-error: true

      - name: Look for security issues in code
        run: poetry run bandit -c pyproject.toml -r stwfsapy
        continue-on-error: true