Skip to content
🧪 check

📝 docs(security): add a threat model and align the policy #1188

Sign in to view logs

📝 docs(security): add a threat model and align the policy

📝 docs(security): add a threat model and align the policy #1188

Workflow file for this run

.github/workflows/check.yaml at e7bcabb
name: 🧪 check
on:
workflow_dispatch:
push:
branches: ["main"]
tags-ignore: ["**"]
pull_request:
types: [opened, synchronize, reopened]
schedule:
- cron: "0 8 * * *"
concurrency:
group: check-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
test:
name: 🧪 Test
runs-on: ubuntu-26.04
strategy:
fail-fast: false
matrix:
env:
- "3.15"
- "3.15t"
- "3.14"
- "3.13"
- "3.12"
- "3.11"
- type
- dev
- pkg_meta
steps:
- name: 📥 Check out code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: false
- name: 🐍 Install uv
uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
with:
python-version: "3.15"
enable-cache: false
cache-dependency-glob: "pyproject.toml"
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: 📦 Install tox
run: uv tool install --python-preference only-managed --python 3.15 tox --with tox-uv
- name: 🐍 Install Python
if: startsWith(matrix.env, '3.') && matrix.env != '3.15'
run: uv python install --python-preference only-managed ${{ matrix.env }}
- name: 📦 Set up test suite
run: tox run -vv --notest --skip-missing-interpreters false -e ${{ matrix.env }}
- name: 🧪 Run test suite
run: tox run --skip-pkg-install -e ${{ matrix.env }}
env:
PYTEST_ADDOPTS: "-vv --durations=20"
DIFF_AGAINST: HEAD
gate:
name: 🚦 Required checks pass
if: ${{ !cancelled() }} # codespell:ignore cancelled
needs: [test]
runs-on: ubuntu-26.04
steps:
- name: 🚦 Require all needed jobs to pass
env:
NEEDS_JSON: ${{ toJSON(needs) }}
run: jq -e 'all(to_entries[]; .value.result == "success")' <<<"$NEEDS_JSON"