#24 - Add initial cicd actions

Author: Kamforka

.github/workflows/_build-package.yml

@@ -0,0 +1,22 @@
+name: build-package
+on: 
+  workflow_call:
+jobs:
+  build:
+    name: Build wheel and sdist
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with: 
+          python-version: 3.13
+      - name: Install build dependencies
+        run: pip install --no-cache-dir -U pip . build twine
+      - name: Build package
+        run: python -m build --sdist --wheel
+      - name: Upload built distributions
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist

.github/workflows/_static-checks.yml

@@ -0,0 +1,24 @@
+name: static-checks
+on: 
+  workflow_call:
+jobs:
+  static-checks:
+    name: Run static checks
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install dependencies
+        run: pip install --no-cache-dir -U pip . black flake8 bandit
+      - name: Lint check with flake8
+        run: flake8 cortexutils/ tests/ setup.py
+      - name: Format check with black
+        run: black --check cortexutils/ tests/ setup.py
+      - name: Security check with bandit
+        run: bandit -r cortexutils/

.github/workflows/_unit-tests.yml

@@ -0,0 +1,20 @@
+name: unit-tests
+on: 
+  workflow_call:
+jobs:
+  unit-tests:
+    name: Run unit tests
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install dependencies
+        run: pip install --no-cache-dir -U pip .
+      - name: Run unit tests
+        run: python -m unittest --verbose

.github/workflows/_upload-package.yml

@@ -0,0 +1,37 @@
+name: upload-package
+on: 
+  workflow_call:
+    secrets:
+      PYPI_TOKEN:
+        required: true
+jobs:
+  upload:
+    name: Upload wheel and sdist
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Compare tag and package version
+        run: |
+          TAG=${GITHUB_REF#refs/*/}
+          VERSION=$(grep -Po '(?<=version=")[^"]*' setup.py)
+          if [ "$TAG" != "$VERSION" ]; then
+            echo "Tag value and package version are different: ${TAG} != ${VERSION}"
+            exit 1
+          fi
+      - name: Download built distributions
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with: 
+          python-version: 3.13
+      - name: Install build dependencies
+        run: pip install --no-cache-dir -U pip . twine
+      - name: Upload to PyPI
+        run: twine upload dist/*
+        env:
+          TWINE_REPOSITORY_URL: https://upload.pypi.org/legacy/
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}

.github/workflows/main-cicd.yml

@@ -0,0 +1,21 @@
+name: cicd
+on: 
+  push:
+    branches:
+      - main
+    tags:
+      - "*"
+  pull_request:
+jobs:
+  static-checks:
+    uses: ./.github/workflows/_static-checks.yml
+  unit-tests:
+    uses: ./.github/workflows/_unit-tests.yml
+  build-package:
+    uses: ./.github/workflows/_build-package.yml
+  upload-package:
+    if: startsWith(github.ref, 'refs/tags/') 
+    uses: ./.github/workflows/_upload-package.yml
+    needs: [build-package, unit-tests, static-checks]
+    secrets:
+      PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}