Skip to content

refactor: extract b64url_decode utility and bump to 0.0.3 #8

refactor: extract b64url_decode utility and bump to 0.0.3

refactor: extract b64url_decode utility and bump to 0.0.3 #8

name: Test and Build Python SDK
on:
push:
branches: [main, alpha, develop]
paths:
- "src/**"
- "tests/**"
- "pyproject.toml"
- "setup.py"
pull_request:
branches: [main, alpha, develop]
paths:
- "src/**"
- "tests/**"
- "pyproject.toml"
- "setup.py"
workflow_dispatch:
jobs:
test:
name: Test Python ${{ matrix.python-version }}
runs-on: ubuntu-latest
strategy:
matrix:
python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
steps:
- uses: actions/checkout@v4
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v5
with:
python-version: ${{ matrix.python-version }}
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e ".[dev]"
- name: Run tests with pytest
run: |
pytest tests/ -v --tb=short --cov=turbo_sdk --cov-report=xml --cov-report=term
- name: Upload coverage to Codecov
if: matrix.python-version == '3.11'
uses: codecov/codecov-action@v4
with:
file: coverage.xml
flags: python-sdk
name: turbo-python-sdk
fail_ci_if_error: false
lint:
name: Code Quality
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up Python 3.11
uses: actions/setup-python@v5
with:
python-version: "3.11"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e ".[dev]"
- name: Run Black formatter check
run: |
black --check src/turbo_sdk/ tests/ examples/
- name: Run flake8 linting
run: |
flake8 src/turbo_sdk/ tests/
- name: Run mypy type checking
run: |
mypy src/turbo_sdk/
continue-on-error: true
build:
name: Build Package
runs-on: ubuntu-latest
needs: [test, lint]
steps:
- uses: actions/checkout@v4
- name: Set up Python 3.11
uses: actions/setup-python@v5
with:
python-version: "3.11"
- name: Install build dependencies
run: |
python -m pip install --upgrade pip
pip install build twine
- name: Build package
run: |
python -m build
- name: Check package with twine
run: |
twine check dist/*
- name: Upload build artifacts
uses: actions/upload-artifact@v4
with:
name: python-package
path: dist/
retention-days: 7
security:
name: Security Scan
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up Python 3.11
uses: actions/setup-python@v5
with:
python-version: "3.11"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e ".[dev]" safety bandit
- name: Run safety check for known vulnerabilities
run: |
safety check
continue-on-error: true
- name: Run bandit security linter
run: |
bandit -r src/turbo_sdk/ -f json -o bandit-report.json
continue-on-error: true
- name: Upload security report
if: always()
uses: actions/upload-artifact@v4
with:
name: security-reports
path: bandit-report.json
retention-days: 7