aaronrene / scooling-lab public
ci.yml yaml
40 lines 1.2 KB
Raw
sha256:ca1d0e687bff8686b37126eb8e4fb6d38b40e189352a4920d66ae89c7274e340 Add T4 job cancellation retry and validation Human minor ⚠ breaking 41 days ago
1 name: ci
2
3 on:
4 pull_request:
5 push:
6 branches: [main]
7
8 jobs:
9 scooling-lab:
10 name: scooling lab contract
11 runs-on: ubuntu-latest
12 steps:
13 - uses: actions/checkout@v6
14 - uses: actions/setup-python@v6
15 with:
16 python-version: "3.13"
17 - name: Run unittest suite (7 tiers)
18 run: PYTHONPATH=src python -m unittest discover -s tests
19 - name: Validate provenance schema guardrails
20 run: PYTHONPATH=src python -m scooling_lab.provenance --self-check
21 - name: Verify dependency BOM is current
22 run: PYTHONPATH=src python -m scooling_lab.bom --check --output DEPENDENCIES.md
23
24 secret-scan:
25 name: secret scan
26 runs-on: ubuntu-latest
27 steps:
28 - uses: actions/checkout@v6
29 with:
30 fetch-depth: 0
31 - name: Install gitleaks
32 env:
33 GITLEAKS_VERSION: 8.24.3
34 run: |
35 curl -sSfL "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" -o gitleaks.tar.gz
36 tar -xzf gitleaks.tar.gz gitleaks
37 sudo mv gitleaks /usr/local/bin/gitleaks
38 gitleaks version
39 - name: Scan for secrets
40 run: gitleaks detect --source . --redact
File History 1 commit
sha256:ca1d0e687bff8686b37126eb8e4fb6d38b40e189352a4920d66ae89c7274e340 Add T4 job cancellation retry and validation Human minor ⚠ 41 days ago