Add README hero image: real OBB detections over the bundled NAIP scene #5

	name: ci

	on:
	push:
	branches: [main]
	pull_request:

	jobs:
	lint-test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	- run: pip install -r requirements.txt -r requirements-dev.txt
	- name: Lint (ruff)
	run: \|
	ruff check .
	ruff format --check .
	- name: SAST (bandit)
	run: bandit -r backend -ll
	- name: Dependency audit (pip-audit)
	run: pip-audit -r requirements.txt
	- name: Tests
	run: pytest -q

	container-scan:
	runs-on: ubuntu-latest
	needs: lint-test
	steps:
	- uses: actions/checkout@v4
	- name: Build image
	run: docker build -t geoint-cop:ci .
	- name: Vulnerability scan (Trivy)
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: geoint-cop:ci
	severity: HIGH,CRITICAL
	exit-code: "1"
	ignore-unfixed: true

Navigation Menu