moving guard from inline in tests.yml

Author: clean6378-max-it

.github/workflows/tests.yml

@@ -57,20 +57,7 @@ jobs:
       - name: Check pywebview pin is single-sourced
         run: |
           python scripts/read_desktop_pywebview_spec.py
-          python <<'PY'
-          import sys
-          from pathlib import Path
-
-          for path in sorted(Path(".github/workflows").glob("*.yml")):
-              text = path.read_text()
-              if "pywebview>=" in text or "pywebview<" in text:
-                  print(f"{path} hardcodes a pywebview version; use scripts/read_desktop_pywebview_spec.py", file=sys.stderr)
-                  sys.exit(1)
-              if "read_desktop_pywebview_spec.py" not in text and "pywebview" in text.lower():
-                  if path.name in ("release.yml", "tests.yml"):
-                      print(f"{path} installs pywebview but does not read the pin from pyproject", file=sys.stderr)
-                      sys.exit(1)
-          PY
+          python scripts/check_pywebview_workflow_pin.py
 
       - name: Install pip-tools
         # Pin matches update-lock.yml so lock verification uses the same resolver.

scripts/check_pywebview_workflow_pin.py

@@ -0,0 +1,31 @@
+"""Fail if workflow YAML hardcodes a pywebview version instead of read_desktop_pywebview_spec."""
+
+from __future__ import annotations
+
+import sys
+from pathlib import Path
+
+READ_SCRIPT = "read_desktop_pywebview_spec.py"
+PYWEBVIEW_INSTALL_WORKFLOWS = ("release.yml", "tests.yml")
+
+
+def main() -> None:
+    for path in sorted(Path(".github/workflows").glob("*.yml")):
+        text = path.read_text()
+        if "pywebview>=" in text or "pywebview<" in text:
+            print(
+                f"{path} hardcodes a pywebview version; use scripts/{READ_SCRIPT}",
+                file=sys.stderr,
+            )
+            raise SystemExit(1)
+        if READ_SCRIPT not in text and "pywebview" in text.lower():
+            if path.name in PYWEBVIEW_INSTALL_WORKFLOWS:
+                print(
+                    f"{path} installs pywebview but does not read the pin from pyproject",
+                    file=sys.stderr,
+                )
+                raise SystemExit(1)
+
+
+if __name__ == "__main__":
+    main()