update examples #39
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Code Quality | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - release/* | |
| jobs: | |
| static-analysis: | |
| name: Static analysis · Ubuntu 24.04 · Python 3.12 | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.12" | |
| - name: Install QA dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| python -m pip install -e ".[qa]" | |
| - name: Verify static-analysis versions | |
| run: python tools/check_static_analysis_versions.py | |
| - name: Ruff lint | |
| run: python -m ruff check . | |
| - name: Ruff format | |
| run: python -m ruff format --check . | |
| - name: Wrapper-plan generator contracts | |
| run: python tools/check_codegen_complexity.py | |
| - name: Bandit security scan | |
| run: python -m bandit -c pyproject.toml -r prik --severity-level medium --confidence-level medium | |
| - name: Vulture dead-code scan | |
| run: python -m vulture | |
| - name: Radon complexity policy | |
| env: | |
| PR_BASE_SHA: ${{ github.event.pull_request.base.sha }} | |
| PUSH_BEFORE_SHA: ${{ github.event.before }} | |
| run: python tools/check_radon_policy.py --base-ref auto | |
| - name: Radon complexity report | |
| continue-on-error: true | |
| run: python -m radon cc prik -n C -s --total-average | |
| - name: Radon maintainability report | |
| continue-on-error: true | |
| run: python -m radon mi prik -s |