Merge pull request #33 from saeedya/feature/ci-cd-setup

ci: add code quality and security scanning workflow

Author: jmccarten-wetafx

.github/workflows/ci.yaml

@@ -0,0 +1,36 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright Contributors to the RMTC Project
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+jobs:
+  lint:
+    name: "Code Quality"
+    runs-on: ubuntu-22.04
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install black pylint pip-audit
+          pip install -e ".[dev]" --no-deps
+
+      - name: Lint (pylint)
+        run: pylint src/
+
+      - name: Security audit (pip-audit)
+        run: pip-audit

.gitignore

@@ -50,3 +50,6 @@ rmtc-setup.sh
 # Ignore sublime files
 *.sublime-project
 *.sublime-workspace
+
+# Ignore .venv files
+.venv/

.pylintrc

@@ -109,7 +109,6 @@ source-roots=
 
 # When enabled, pylint would attempt to guess common misconfiguration and emit
 # user-friendly hints instead of false-positive error messages.
-suggestion-mode=yes
 
 # Allow loading of arbitrary C extensions. Extensions are imported into the
 # active Python interpreter and may run arbitrary code.

pyproject.toml

@@ -12,8 +12,7 @@ dynamic = ["version"]
 description = "The Rongotai Model Train Club - AI artifact provenance and training system"
 requires-python = ">=3.9"
 readme = "README.md"
-license = {text = "Apache-2.0"}
-license-files = ["LICENSE"]
+license = "Apache-2.0"
 
 dependencies = [
 
@@ -27,8 +26,6 @@ dependencies = [
     "requests>=2.28.0",     
 
     # GUI
-    "NodeGraphQt>=0.6.0",
-    "PySide>=2.0.0",
 
     # Track
     "apache_age_python>=0.0.7",
@@ -53,6 +50,7 @@ dev = [
     "pytest>=8.3.0",
     "pylint>=3.3.0",
     "black>=24.8.0",
+    "pip-audit>=2.10.0",
 ]
 
 [tool.setuptools]

src/python/lib/rmtc_core/track/cypher/connection.py

@@ -475,11 +475,11 @@ def _sync_properties(self, entity, required_only=False):
                 continue
             if prop.is_output():
                 query = f"""
-                    MATCH (a:{entity.class_category})-[r:{prop.name}]->(b) 
+                    MATCH (a:{entity.class_category})-[r:{prop.name}]->(b)
                 """
             elif prop.is_input():
                 query = f"""
-                    MATCH (a:{entity.class_category})<-[r:{prop.name}]-(b) 
+                    MATCH (a:{entity.class_category})<-[r:{prop.name}]-(b)
                 """
             query += f"""
                 WHERE a._obj_id='{entity.obj_id}'
@@ -614,7 +614,7 @@ def get_runs(
         # ambiguous - fully qualified relation
         if checkpoint is not None:
             query = f"""
-                MATCH (r:Run)-[:checkpoints]->(n) WHERE n._obj_id='{checkpoint.obj_id}' 
+                MATCH (r:Run)-[:checkpoints]->(n) WHERE n._obj_id='{checkpoint.obj_id}'
                 RETURN r._obj_id AS id
             """
             results = self.connection.read_query(query)
@@ -814,7 +814,7 @@ def _get_entity(
         if name is None and entity_license is None and version is None:
             self.connection.store.log.warning(f"Requesting all {category}s")
             query = f"""
-                MATCH (n:{category}) WHERE n._store='{self.connection.store.name}' 
+                MATCH (n:{category}) WHERE n._store='{self.connection.store.name}'
                 RETURN DISTINCT n._obj_id AS id
             """
             results = self.connection.read_query(query)
@@ -848,7 +848,8 @@ def _get_entity(
             if len(entity_obj_ids) > 0:
                 clause = f" AND n._obj_id IN {entity_obj_ids} "
             query = f"""
-                MATCH (n)-[:licenses]->(l:License) WHERE l._obj_id='{entity_license.obj_id}' {clause}
+                MATCH (n)-[:licenses]->(l:License) 
+                WHERE l._obj_id='{entity_license.obj_id}' {clause}
                 RETURN DISTINCT n._obj_id AS id
             """
             results = self.connection.read_query(query)