lint-publish.yml

name: Lint, test, and publish

on: push

jobs:
  lint-format:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install poetry
        run: pipx install poetry

      - name: Set up Python 3.11
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"
          cache: "poetry"

      - name: Install dependencies
        run: poetry install --with=dev

      - name: Lint with ruff
        run: poetry run ruff check --exit-zero --output-format github

      - name: Check ruff format
        run: poetry run ruff format --check

  publish:
    needs: lint-format
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
    runs-on: ubuntu-latest
    environment: release
    # this permission is required for PyPI Trusted Publisher setup
    # https://docs.pypi.org/trusted-publishers/using-a-publisher/
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@v4

      - name: Install poetry
        run: pipx install poetry

      - name: Set up Python 3.11
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"
          cache: "poetry"

      - name: Install dependencies
        run: poetry install --with=dev

      - name: Run pytest
        run: poetry run pytest --cov=mitreattack

      - name: Build package
        run: poetry build

      - name: Publish package
        uses: pypa/gh-action-pypi-publish@release/v1