main.yml

name: sandpit

on:
  push:
    branches:
      - main

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: [3.8, 3.9, "3.10", "3.11", "3.12", "3.13.0-beta.3"]

    steps:
      - uses: actions/checkout@v4
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - name: Install deploy dependencies
        run: pip install .[deploy]
      - name: Install test dependencies
        run: pip install .[test]
      - name: Install code dependencies
        run: pip install .
      - name: Lint with pylint
        run: pylint -E src
      - name: Scan security vulnerabilities with bandit
        run: bandit -c pyproject.toml -r -lll .
      - name: Generate coverage report
        run: pytest
      - name: "Upload coverage to Codecov"
        uses: codecov/codecov-action@v4
        with:
          token: ${{ secrets.CODECOV_TOKEN }} # supposedly not required for public repos
          fail_ci_if_error: true