Skip to content
CI

ci: remove obsolete runtime image publishing #15

Sign in to view logs

ci: remove obsolete runtime image publishing

ci: remove obsolete runtime image publishing #15

Workflow file for this run

.github/workflows/ci.yml at d44a2c1
name: CI
on:
pull_request:
branches: [main, dev]
push:
branches: [main, dev]
tags: ["v*.*.*"]
merge_group:
concurrency:
group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
permissions:
contents: read
env:
PYTHON_VERSION: "3.11"
LOCAL_API_IMAGE_AMD64: code-interpreter:ci-amd64
LOCAL_API_IMAGE_ARM64: code-interpreter:ci-arm64
jobs:
changes:
runs-on: ubuntu-latest
outputs:
runtime: ${{ steps.filter.outputs.runtime }}
container: ${{ steps.filter.outputs.container }}
steps:
- uses: actions/checkout@v4
- id: filter
uses: dorny/paths-filter@v3
with:
filters: |
runtime:
- 'Dockerfile'
- 'docker/requirements/**'
container:
- 'Dockerfile'
- 'docker/**'
- 'src/**'
- 'dashboard/**'
- 'requirements.txt'
- 'docker-compose.yml'
static:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v6
with:
python-version: ${{ env.PYTHON_VERSION }}
cache: pip
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
pip install flake8 black mypy bandit
- name: Lint with flake8
run: |
flake8 src/ --count --select=E9,F63,F7,F82 --show-source --statistics
flake8 src/ --count --exit-zero --max-complexity=10 --statistics
- name: Check formatting with Black
run: black src/ --check
- name: Type checking with mypy
run: mypy src/
- name: Security scan with Bandit
run: bandit -r src/ -s B104,B108 --severity-level high
unit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v6
with:
python-version: ${{ env.PYTHON_VERSION }}
cache: pip
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
pip install pytest pytest-asyncio pytest-cov pytest-mock
- name: Run unit tests
run: |
mkdir -p test-results
pytest tests/unit/ --junitxml=test-results/unit.xml
- name: Upload unit results
if: always()
uses: actions/upload-artifact@v4
with:
name: unit-results
path: test-results/
if-no-files-found: ignore
integration-contract:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v6
with:
python-version: ${{ env.PYTHON_VERSION }}
cache: pip
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
pip install pytest pytest-asyncio pytest-cov pytest-mock
- name: Run contract integration tests
run: |
mkdir -p test-results
pytest tests/integration/ -m contract_only --junitxml=test-results/integration-contract.xml
- name: Upload contract integration results
if: always()
uses: actions/upload-artifact@v4
with:
name: integration-contract-results
path: test-results/
if-no-files-found: ignore
integration-core:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v6
with:
python-version: ${{ env.PYTHON_VERSION }}
cache: pip
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
pip install pytest pytest-asyncio pytest-cov pytest-mock
- name: Run core integration tests
run: |
mkdir -p test-results
pytest tests/integration/ -m "not contract_only" --junitxml=test-results/integration-core.xml
- name: Upload core integration results
if: always()
uses: actions/upload-artifact@v4
with:
name: integration-core-results
path: test-results/
if-no-files-found: ignore
build-app-amd64:
needs: [changes]
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@v4
- uses: docker/setup-buildx-action@v3
- name: Build amd64 app candidate
run: |
docker buildx build \
--load \
--target app \
--tag "${LOCAL_API_IMAGE_AMD64}" \
--cache-from "type=gha,scope=app-amd64" \
--cache-to "type=gha,scope=app-amd64,mode=max" \
.
- name: Inspect amd64 image
run: docker image inspect "${LOCAL_API_IMAGE_AMD64}" >/dev/null
functional-smoke-amd64:
needs: [changes]
runs-on: ubuntu-24.04
timeout-minutes: 45
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v6
with:
python-version: ${{ env.PYTHON_VERSION }}
cache: pip
- uses: docker/setup-buildx-action@v3
- name: Install test dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
pip install pytest pytest-asyncio pytest-cov pytest-mock
- name: Build local amd64 test image
run: |
docker buildx build \
--load \
--target app \
--tag "${LOCAL_API_IMAGE_AMD64}" \
--cache-from "type=gha,scope=app-amd64" \
--cache-to "type=gha,scope=app-amd64,mode=max" \
.
- name: Start live stack
env:
API_IMAGE: ${{ env.LOCAL_API_IMAGE_AMD64 }}
run: |
cp .env.example .env
docker compose up -d
- name: Wait for API
run: |
if ! scripts/ci/wait_for_api.sh http://localhost:8000/health 24 5; then
docker compose logs --no-color api
exit 1
fi
- name: Run live smoke tests
env:
API_BASE: http://localhost:8000
API_KEY: your-secure-api-key-here-change-this-in-production
run: |
mkdir -p test-results
pytest tests/functional/ \
-m "live_api and not slow and not client_replay" \
-v \
--junitxml=test-results/functional-smoke-amd64.xml
- name: Capture compose logs on failure
if: failure()
run: docker compose logs --no-color > compose-amd64.log
- name: Upload functional smoke artifacts
if: always()
uses: actions/upload-artifact@v4
with:
name: functional-smoke-amd64
path: |
test-results/
compose-amd64.log
if-no-files-found: ignore
- name: Stop live stack
if: always()
run: docker compose down -v
client-replay-amd64:
needs: [changes]
runs-on: ubuntu-24.04
timeout-minutes: 45
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v6
with:
python-version: ${{ env.PYTHON_VERSION }}
cache: pip
- uses: docker/setup-buildx-action@v3
- name: Install test dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
pip install pytest pytest-asyncio pytest-cov pytest-mock
- name: Build local amd64 replay image
run: |
docker buildx build \
--load \
--target app \
--tag "${LOCAL_API_IMAGE_AMD64}" \
--cache-from "type=gha,scope=app-amd64" \
--cache-to "type=gha,scope=app-amd64,mode=max" \
.
- name: Start live stack
env:
API_IMAGE: ${{ env.LOCAL_API_IMAGE_AMD64 }}
run: |
cp .env.example .env
docker compose up -d
- name: Wait for API
run: |
if ! scripts/ci/wait_for_api.sh http://localhost:8000/health 24 5; then
docker compose logs --no-color api
exit 1
fi
- name: Run client replay tests
env:
API_BASE: http://localhost:8000
API_KEY: your-secure-api-key-here-change-this-in-production
run: |
mkdir -p test-results
pytest tests/functional/ \
-m client_replay \
-v \
--junitxml=test-results/client-replay-amd64.xml
- name: Capture compose logs on failure
if: failure()
run: docker compose logs --no-color > compose-client-replay.log
- name: Upload client replay artifacts
if: always()
uses: actions/upload-artifact@v4
with:
name: client-replay-amd64
path: |
test-results/
compose-client-replay.log
if-no-files-found: ignore
- name: Stop live stack
if: always()
run: docker compose down -v
arm64-smoke-conditional:
if: needs.changes.outputs.container == 'true'
needs: [changes]
runs-on: ubuntu-24.04-arm
timeout-minutes: 35
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v6
with:
python-version: ${{ env.PYTHON_VERSION }}
cache: pip
- uses: docker/setup-buildx-action@v3
- name: Install test dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
pip install pytest pytest-asyncio pytest-cov pytest-mock
- name: Build local arm64 test image
run: |
docker buildx build \
--load \
--target app \
--tag "${LOCAL_API_IMAGE_ARM64}" \
--cache-from "type=gha,scope=app-arm64" \
--cache-to "type=gha,scope=app-arm64,mode=max" \
.
- name: Start live stack
env:
API_IMAGE: ${{ env.LOCAL_API_IMAGE_ARM64 }}
run: |
cp .env.example .env
docker compose up -d
- name: Wait for API
run: |
if ! scripts/ci/wait_for_api.sh http://localhost:8000/health 24 5; then
docker compose logs --no-color api
exit 1
fi
- name: Run arm64 smoke suite
env:
API_BASE: http://localhost:8000
API_KEY: your-secure-api-key-here-change-this-in-production
run: |
mkdir -p test-results
pytest \
tests/functional/test_health.py \
tests/functional/test_exec_workflow.py::TestSessionWorkflow::test_execution_creates_session \
tests/functional/test_files.py::TestFileUpload::test_upload_single_file \
tests/functional/test_ptc.py::TestPTCInitialExecution::test_ptc_simple_code_completes \
-v \
--junitxml=test-results/arm64-smoke.xml
- name: Capture compose logs on failure
if: failure()
run: docker compose logs --no-color > compose-arm64.log
- name: Upload arm64 smoke artifacts
if: always()
uses: actions/upload-artifact@v4
with:
name: arm64-smoke
path: |
test-results/
compose-arm64.log
if-no-files-found: ignore
- name: Stop live stack
if: always()
run: docker compose down -v