python-ci.yaml

name: CI/CD for simple-http-checker

on:
  push:
    branches: ['main']
  workflow_dispatch:

jobs:
  lint-static-checks:
    runs-on: ubuntu-latest
    steps:
      - name: Check out repo
        uses: actions/checkout@v4
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.12'
      - name: Display Python version and location
        run: |
          python --version
          which python
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install ".[dev]"
      - name: Linting and format checks
        run: |
          ruff check .
          black --check .
      - name: Static type checks
        run: |
          mypy src/
      - name: Security checks
        run: |
          bandit -c pyproject.toml -r .
  tests:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ['3.9', '3.10', '3.11', '3.12']
    steps:
      - name: Check out repo
        uses: actions/checkout@v4
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install ".[dev]"
      - name: Automated tests with Pytest
        run: |
          pytest
  build-and-upload:
    runs-on: ubuntu-latest
    needs:
      - tests
      - lint-static-checks
    permissions:
      contents: write
      id-token: write  
    steps:
      - name: Check out repo
        uses: actions/checkout@v4
        with: 
          fetch-depth: 0
          token: ${{ secrets.GH_PAT }}
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install python-semantic-release
      - name: Create release
        env:
          GH_TOKEN: ${{ secrets.GH_PAT }}
        run: |
          semantic-release version
          semantic-release publish