Skip to content

fix(ci): add required copier fields to scheduled workflow (#33) #80

fix(ci): add required copier fields to scheduled workflow (#33)

fix(ci): add required copier fields to scheduled workflow (#33) #80

Workflow file for this run

name: CI
on:
push:
pull_request:
types: [opened, synchronize, reopened]
jobs:
lint:
name: Code Quality
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.14"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e ".[dev]"
- name: Run ruff check
run: ruff check .
- name: Run ruff format check
run: ruff format --check .
- name: Run mypy
run: mypy tests/ --ignore-missing-imports
test:
name: Test Suite
runs-on: ubuntu-latest
strategy:
matrix:
python-version: ["3.12", "3.13", "3.14"]
steps:
- uses: actions/checkout@v6
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v6
with:
python-version: ${{ matrix.python-version }}
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e ".[dev]"
- name: Run tests
run: pytest -v --tb=short
- name: Run tests with coverage
if: matrix.python-version == '3.14'
run: pytest --cov --cov-report=xml --cov-report=term
- name: Upload coverage to Codecov
if: matrix.python-version == '3.14'
uses: codecov/codecov-action@v5
with:
file: ./coverage.xml
fail_ci_if_error: false
continue-on-error: true
test-generation:
name: Test Template Generation
runs-on: ubuntu-latest
strategy:
matrix:
project-type: [saas, api, web-app, internal-tool]
steps:
- uses: actions/checkout@v6
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.14"
- name: Install Copier
run: |
python -m pip install --upgrade pip
pip install copier
- name: Generate ${{ matrix.project-type }} project
run: |
PROJECT_SLUG=$(echo "test_${{ matrix.project-type }}" | sed 's/-/_/g')
copier copy . ../test_${{ matrix.project-type }} \
--data project_name="Test ${{ matrix.project-type }}" \
--data project_slug="${PROJECT_SLUG}" \
--data project_description="A test project for ${{ matrix.project-type }}" \
--data author_name="Django Keel CI" \
--data author_email="[email protected]" \
--data project_type=${{ matrix.project-type }} \
--defaults \
--trust
- name: Verify generated project structure
run: |
cd ../test_${{ matrix.project-type }}
test -f pyproject.toml
test -f Dockerfile
test -f docker-compose.yml
test -f Justfile
test -d apps/
test -d config/
test -d tests/
- name: Check for Jinja syntax errors
run: |
cd ../test_${{ matrix.project-type }}
! grep -r "{{" . --include="*.py" --include="*.md" --include="*.toml"
! grep -r "{%" . --include="*.py" --include="*.md" --include="*.toml"
validate-yaml:
name: Validate YAML Files
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.14"
- name: Install yamllint
run: pip install yamllint
- name: Validate YAML
run: |
find . -name "*.yml" -o -name "*.yaml" | \
grep -v node_modules | \
xargs yamllint -d relaxed
security:
name: Security Checks
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.14"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install pip-audit safety
- name: Run pip-audit
run: pip-audit --require-hashes --disable-pip || true
continue-on-error: true
- name: Check for secrets
uses: trufflesecurity/trufflehog@main
with:
path: ./
base: ${{ github.event.repository.default_branch }}
head: HEAD
continue-on-error: true
docs:
name: Documentation
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
with:
fetch-depth: 0 # Need full history for git-revision-date plugin
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.14"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install mkdocs mkdocs-material mkdocs-git-revision-date-localized-plugin
- name: Build documentation
run: mkdocs build --strict
- name: Check for broken links in docs
uses: lycheeverse/lychee-action@v2
with:
args: --config .lychee.toml --verbose --no-progress 'docs/**/*.md' 'README.md'
fail: true
continue-on-error: false
all-checks:
name: All Checks Passed
needs: [lint, test, test-generation, validate-yaml, security, docs]
runs-on: ubuntu-latest
steps:
- name: Confirm all checks passed
run: echo "All CI checks passed successfully!"