ci.yml

name: CI

on:
  push:
    branches: [master]
  pull_request:

permissions:
  contents: read

jobs:
  lint-and-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.14"

      - name: Install yq
        run: |
          sudo wget -qO /usr/local/bin/yq \
            https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
          sudo chmod +x /usr/local/bin/yq
          yq --version

      - name: Install Python tooling
        run: |
          python -m pip install --upgrade pip
          pip install ruff yamllint cfn-lint pytest pyyaml botocore

      - name: Ruff lint
        run: ruff check .

      - name: Ruff format check
        run: ruff format --check .

      - name: yamllint
        run: yamllint .

      - name: cfn-lint
        run: cfn-lint CFN-CR-PythonLambdaLayer.yaml CFN-CR-PythonLambdaLayer-SampleUsage.yaml

      - name: Embedded code matches tracked file
        run: python scripts/check_embedded_code.py

      - name: pytest
        run: pytest -v