messagekit/.github/workflows/linters.yml at master · firstunicorn/messagekit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
name: Linters

on:
  push:
    branches: [ master, main, develop ]
  pull_request:
    branches: [ master, main, develop ]
  workflow_dispatch:

jobs:
  lint:
    runs-on: ubuntu-latest
    timeout-minutes: 10

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Python 3.12
        uses: actions/setup-python@v5
        with:
          python-version: '3.12'
          cache: 'pip'

      - name: Install Poetry
        uses: snok/install-poetry@v1
        with:
          version: 2.3.3
          virtualenvs-create: true
          virtualenvs-in-project: true

      - name: Cache Poetry dependencies
        uses: actions/cache@v4
        with:
          path: .venv
          key: venv-lint-devtest-${{ runner.os }}-${{ hashFiles('**/poetry.lock') }}

      - name: Install dependencies
        run: poetry install --with dev,test --no-interaction

      - name: Run ruff
        run: |
          echo "::group::Ruff Check"
          poetry run ruff check src/ tests/
          echo "::endgroup::"

      - name: Run isort
        run: |
          echo "::group::isort Check"
          poetry run isort --check-only src/ tests/
          echo "::endgroup::"

      - name: Run mypy
        run: |
          echo "::group::mypy Type Check"
          poetry run mypy src/
          echo "::endgroup::"

      - name: Run flake8
        run: |
          echo "::group::flake8"
          poetry run flake8 src/ tests/
          echo "::endgroup::"

      - name: Run pylint
        run: |
          echo "::group::pylint"
          poetry run pylint src/ --exit-zero
          echo "::endgroup::"

      - name: Run bandit
        run: |
          echo "::group::bandit Security Check"
          poetry run bandit -r src/ -ll
          echo "::endgroup::"

      - name: Run deptry
        run: |
          echo "::group::deptry Dependency Check"
          poetry run deptry src/
          echo "::endgroup::"

      - name: Run vulture
        run: |
          echo "::group::vulture Dead Code Check"
          poetry run vulture src/ tests/ .vulture-whitelist.py --exclude .venv --min-confidence 80
          echo "::endgroup::"

      - name: Run radon
        run: |
          echo "::group::radon Complexity Check"
          poetry run radon cc src/ -a -nb
          echo "::endgroup::"

      - name: Run interrogate
        run: |
          echo "::group::interrogate Docstring Check"
          poetry run interrogate src/ -vv
          echo "::endgroup::"

      - name: Run import-linter
        run: |
          echo "::group::import-linter"
          poetry run lint-imports
          echo "::endgroup::"

      - name: Run safety check
        run: |
          echo "::group::safety Security Check"
          poetry run safety check --json || echo "Safety check completed with warnings"
          echo "::endgroup::"

      - name: Lint summary
        if: always()
        run: |
          echo "### Linter Results ✨" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "All code quality checks completed." >> $GITHUB_STEP_SUMMARY
          echo "See logs above for details." >> $GITHUB_STEP_SUMMARY