TorusGuard/.github/workflows/python-fixtures.yml at main · githubmofo/TorusGuard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
name: Python Fixtures & Validation Harness

on:
  push:
    branches: [ main ]
    paths:
      - 'examples/python/**'
      - 'guides/python/**'
      - 'core/**'
      - 'harness/**'
      - 'schemas/**'
      - 'rules/**'
      - '.github/workflows/python-fixtures.yml'
  pull_request:
    branches: [ main ]
    paths:
      - 'examples/python/**'
      - 'guides/python/**'
      - 'core/**'
      - 'harness/**'
      - 'schemas/**'
      - 'rules/**'
      - '.github/workflows/python-fixtures.yml'

permissions:
  contents: read

jobs:
  validation-harness:
    name: TorusGuard Validation Harness (v0.6.x)
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"

      - name: Run Core Harness & Governed Remediation Test Suites
        run: |
          python harness/runner.py
          python harness/validate_v0_7_0_runtime.py
          python harness/validate_v0_6_3_hardening.py
          python harness/validate_v0_6_2_modern_stacks.py
          python harness/validate_v0_6_1_scale.py
          python harness/validate_qa_v0_6_0.py
          python tests/test_v0_6_0_governed_remediation.py

  verify-fixtures:
    name: Verify ${{ matrix.fixture }}
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        fixture:
          - django-vuln
          - django-hardened
          - drf-vuln
          - drf-hardened
          - fastapi-vuln
          - fastapi-hardened
          - flask-vuln
          - flask-hardened
          - sqlalchemy-vuln
          - sqlalchemy-hardened

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"

      - name: Check fixture syntax and structure
        run: |
          echo "Testing fixture: ${{ matrix.fixture }}"
          cd examples/python/${{ matrix.fixture }}
          python -m compileall .
          if [ -f requirements.txt ]; then
            echo "requirements.txt present"
          fi
          if [ -f README.md ]; then
            echo "README.md present"
          fi