ci(python): add advisory ty type checking with SARIF reporting - #3752

Draft

mcosgriff wants to merge 13 commits into

mainfrom

add-python-type-checking-astral-ty

Commits on Aug 20, 2026

ci(python): add advisory ty type checking with SARIF reporting
mcosgriff
committed
4534c1e
fix(python): lock tool script deps and validate ty_report paths
mcosgriff
committed
1478f93

Commits on Aug 21, 2026

fix(python): validate untrusted ty JSON before it reaches the report
mcosgriff
committed
8d6c94e
build(python): pin ruff, ty and the stub generator tools exactly
mcosgriff
committed
5d13761
ci: consolidate uv setup into a composite action
mcosgriff
committed
4ae2194
Potential fix for pull request finding 'CodeQL / Incomplete URL substring sanitization'

mcosgriff
and
github-advanced-security[bot]
authored
638cb8c
ci: pass --frozen literally on the uv sync line
mcosgriff
committed
62e96ed
ci: bump setup-uv from v8.3.2 to v10.0.1
mcosgriff
committed
e888c03
fix(ci): drop --no-build from the unit test uv run calls
mcosgriff
committed
c66c075
ci(python): run the ruff job without installing the project
mcosgriff
committed
453fd98
feat(python): namespace ty rule ids as ty/ in the SARIF report
mcosgriff
committed
f26a713
fix(ci): use --no-sync so --no-build applies to the uv run steps
mcosgriff
committed
68b5630
style(python): apply ruff format to test_inject_tlm_received_time
mcosgriff
committed
0d8eeef