LeoWalker's picture
Harden CI credential and lock handling
7e2bae0
Raw
History Blame Contribute Delete
963 Bytes
name: CI
on:
pull_request:
push:
branches:
- main
concurrency:
group: ci-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
quality:
name: Quality
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- name: Check out repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install uv and Python
uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
with:
version: "0.10.2"
python-version: "3.11"
enable-cache: true
- name: Sync locked dependencies
run: uv sync --locked --extra dev
- name: Lint
run: uv run --frozen ruff check .
- name: Check formatting
run: uv run --frozen ruff format --check .
- name: Test
run: uv run --frozen pytest