This commit is contained in:
Jeff Epler 2023-11-08 10:57:12 -06:00
parent 06d3a4d952
commit e3355efabc
No known key found for this signature in database
GPG key ID: D5BF15AB975AB4DE
4 changed files with 145 additions and 0 deletions

48
.github/workflows/codeql.yml vendored Normal file
View file

@ -0,0 +1,48 @@
# SPDX-FileCopyrightText: 2022 Jeff Epler
#
# SPDX-License-Identifier: CC0-1.0
name: "CodeQL"
on:
push:
branches: [ "main" ]
pull_request:
branches: [ "main" ]
schedule:
- cron: "53 3 * * 5"
jobs:
analyze:
name: Analyze
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
strategy:
fail-fast: false
matrix:
language: [ python ]
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Install Dependencies (python)
run: pip3 install -r requirements-dev.txt
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
with:
languages: ${{ matrix.language }}
queries: +security-and-quality
- name: Autobuild
uses: github/codeql-action/autobuild@v2
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
with:
category: "/language:${{ matrix.language }}"

40
.github/workflows/release.yml vendored Normal file
View file

@ -0,0 +1,40 @@
# SPDX-FileCopyrightText: 2021 Jeff Epler
#
# SPDX-License-Identifier: MIT
name: Release chap
on:
release:
types: [published]
jobs:
release:
runs-on: ubuntu-22.04
steps:
- name: Dump GitHub context
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
run: echo "$GITHUB_CONTEXT"
- uses: actions/checkout@v3
- name: Set up Python
uses: actions/setup-python@v4
with:
python-version: 3.9
- name: Install deps
run: |
python -mpip install wheel
python -mpip install -r requirements-dev.txt
- name: Build release
run: python -mbuild
- name: Upload release
run: twine upload -u "$TWINE_USERNAME" -p "$TWINE_PASSWORD" dist/*
env:
TWINE_USERNAME: __token__
TWINE_PASSWORD: ${{ secrets.pypi_token }}

56
.github/workflows/test.yml vendored Normal file
View file

@ -0,0 +1,56 @@
# SPDX-FileCopyrightText: 2021 Jeff Epler
#
# SPDX-License-Identifier: MIT
name: Test
on:
push:
pull_request:
release:
types: [published]
check_suite:
types: [rerequested]
jobs:
pre-commit:
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@v3
- name: pre-commit
uses: pre-commit/action@v3.0.0
- name: Make patch
if: failure()
run: git diff > ~/pre-commit.patch
- name: Upload patch
if: failure()
uses: actions/upload-artifact@v3
with:
name: patch
path: ~/pre-commit.patch
test-release:
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@v3
- name: Set up Python
uses: actions/setup-python@v4
with:
python-version: 3.9
- name: install deps
run: pip install -r requirements-dev.txt
- name: Build release
run: python -mbuild
- name: Upload artifacts
uses: actions/upload-artifact@v3
with:
name: dist
path: dist/*

1
requirements-dev.txt Normal file
View file

@ -0,0 +1 @@
chap