ci-pr.yaml

name: "[CI] Test PR"

on: [pull_request]

jobs:
  unitlint:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        python: [ "3.8", "3.9", "3.10", "3.11", "3.12" ]

    steps:
      - uses: actions/checkout@v4
      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python }}
      - name: Install Tox and any other packages
        run: pip install tox
      - name: Run Lint
        run: |
          pip install pre-commit
          pre-commit run --all-files
      - name: Run Tox
        run: |
          tox -e py
          mv coverage.xml coverage-${{ matrix.python }}.xml
      - name: Store coverage file
        uses: actions/upload-artifact@v4
        if: matrix.os == 'ubuntu-latest'
        with:
          name: coverage-${{ matrix.python }}
          path: coverage-${{ matrix.python }}.xml
      - name: Save PR number
        run: |
          mkdir -p ./pr
          echo ${{ github.event.number }} > ./pr/NR
      - uses: actions/upload-artifact@v2
        with:
          name: pr
          path: pr/
  data:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"
      - name: Install Tox and any other packages
        run: pip install tox
      - name: Run Tox
        run: |
          tox -e py -- -m "data"
  integration:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        python: ["3.10"]
    steps:
      - uses: actions/checkout@v4
      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python }}
      - name: Install cfn-lint
        run: |
          pip3 install -e .
      - name: Run cfn-lint
        run: |
          cfn-lint test/fixtures/templates/good/generic.yaml
          cat test/fixtures/templates/good/generic.yaml | cfn-lint
  dependencies:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest]
        python: ["3.10"]
    steps:
      - uses: actions/checkout@v4
      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python }}
      - name: Install cfn-lint
        run: |
          pip3 install -e .
          pip install --upgrade pip
          pip install --upgrade setuptools
      - uses: pypa/gh-action-pip-audit@v1.0.8
        with:
          ignore-vulns: |
            GHSA-r9hx-vwmv-q579
            PYSEC-2022-43012
            PYSEC-2024-60