gating.yaml

name: Gating

on:
  pull_request:
  push:
    branches:
      - main
  workflow_dispatch:
    inputs: {}

jobs:
  tests:
    name: Unit tests
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ["3.9", "3.10", "3.11", "3.12"]

    container:
      image: python:${{ matrix.python-version }}-slim

    steps:
    - name: Install dependencies
      run: |
        # We need to install git inside the container otherwise the checkout action will use Git
        # REST API and the .git directory won't be present which fails due to setuptools-scm
        apt-get update && apt-get install --no-install-recommends --no-install-suggests -y git
        python3 -m pip install --upgrade pip
        pip install tox

    - uses: actions/checkout@v4
      with:
        fetch-depth: 0

    - name: Test with tox
      run: |
        # Disable Git's safe.directory mechanism as some unit tests do clone repositories
        git config --global --add safe.directory '*'
        tox -e py3

    - name: Upload coverage reports to Codecov
      if: matrix.python-version == '3.12'
      uses: codecov/codecov-action@v4
      with:
        token: ${{ secrets.CODECOV_TOKEN }}

  linters:
    name: Linters
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        tox_env:
          - bandit
          - black
          - isort
          - flake8
          - mypy

    container:
      image: python:3.9-slim

    steps:
    - name: Install dependencies
      run: |
        # We need to install git inside the container otherwise the checkout action will use Git
        # REST API and the .git directory won't be present which fails due to setuptools-scm
        apt-get update && apt-get install --no-install-recommends --no-install-suggests -y git
        python3 -m pip install --upgrade pip
        pip install tox

    - uses: actions/checkout@v4
      with:
        fetch-depth: 0

    - name: Test '${{ matrix.tox_env }}' with tox
      run: tox -e ${{ matrix.tox_env }}

  hadolint:
    name: Hadolint
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: hadolint/hadolint-action@v3.1.0
      with:
        dockerfile: Containerfile
        # Ignore list:
        # * DL3041 - Specify version with dnf install -y <package>-<version>
        ignore: DL3041
        failure-threshold: warning

  build-image:
    name: Build Cachi2 image and run integration tests on it
    runs-on: ubuntu-latest
    container:
      image: registry.fedoraproject.org/fedora:40
      options: --privileged
      volumes:
      # https://github.com/containers/buildah/issues/3666
      - /var/lib/containers:/var/lib/containers

    steps:
      - name: Install required packages
        run: |
          dnf distro-sync -y
          dnf install -y python3 python3-devel python3-pip gcc git podman
          pip3 install --upgrade pip
          pip3 install tox tox-gh-actions

      - name: add checkout action...
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Build Cachi2 image
        run: |
          podman build -t cachi2:${{ github.sha }} .

      - name: Check image created and Cachi2 version
        run: |
          podman images | grep 'cachi2'
          podman run -t cachi2:${{ github.sha }} --version

      - name: Run integration tests on built image
        env:
          CACHI2_IMAGE: localhost/cachi2:${{ github.sha }}
          CACHI2_TEST_LOCAL_PYPISERVER: 'true'
        run: |
          git config --global --add safe.directory "*"
          tox -e integration