Skip to content

ci: add explicit workflow permissions (#290) #678

ci: add explicit workflow permissions (#290)

ci: add explicit workflow permissions (#290) #678

name: python-unittest
on:
push:
branches: ["**"]
pull_request:
branches: ["**"]
permissions:
contents: read
jobs:
build:
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
python-version: ["3.10", "3.11", "3.12", "3.13"]
steps:
- uses: actions/checkout@v3
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v3
with:
python-version: ${{ matrix.python-version }}
- name: Install uv
uses: astral-sh/setup-uv@v4
with:
version: "latest"
- name: Install dependencies
run: |
uv sync --group dev
- name: Lint with prek
run: |
uv run prek run --all-files
- name: Test with pytest
run: |
uv run pytest ./src --cov=./src --record-mode=none --cov-report xml
env: # Or as an environment variable
OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
# Upload coverage to Codecov
- name: Upload coverage to Codecov
uses: codecov/codecov-action@v5
with:
file: ./coverage.xml
flags: ${{ matrix.python-version }}
token: ${{ secrets.CODECOV_TOKEN }} # required
verbose: true # optional (default = false)