tests.yml

name: tests (unit)

on:
  pull_request: {}
  push:
    branches:
      - master

jobs:
  test:

    runs-on: ubuntu-latest

    strategy:
      max-parallel: 5
      matrix:
        python-version: [3.9, '3.10', 3.11, 3.12, 3.13]

    steps:
      - uses: actions/checkout@v4
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - name: Install dependencies
        run: |
          sudo apt install python3-poetry
          poetry install --with=test
          poetry run mypy --install-types --non-interactive puppetboard/ test/
      - name: Test
        run: |
          poetry run pytest --cov=. --cov-report=xml --strict-markers --mypy -v puppetboard test
          poetry run pylint --errors-only puppetboard test
      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v5.1.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          fail_ci_if_error: true
      - name: Build
        run: |
          poetry build -v

  build_docker_image:
    name: 'Test building a container'
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Build Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: false

  security-tests:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Set up Python 3.13
        uses: actions/setup-python@v5
        with:
          python-version: 3.13
      - name: Run bandit
        run: |
          sudo apt install python3-poetry
          poetry install --with=test
          poetry run bandit -r puppetboard

  tests:
    needs:
      - test
      - build_docker_image
      - security-tests
    runs-on: ubuntu-latest
    name: Test suite
    steps:
      - run: echo Test suite completed