ci: activate L9 governed python pipeline#143
Open
cryptoxdog wants to merge 5 commits into
Open
Conversation
Preset: python. Discovered config: {"SOURCE_DIR": ".", "TEST_DIR": "tests/"}
|
📋 Best Practices for Large Changes
✅ This PR passes the blocking limit but is larger than recommended. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| permissions: | ||
| contents: read | ||
| checks: write |
| artifact-name: ${{ steps.names.outputs.artifact-name }} | ||
| permissions: | ||
| contents: read | ||
| checks: write |
| uses: Quantum-L9/l9-ci-core/.github/workflows/publish-analysis.yml@f88116503430aa18992b70d8d31063e34ff97ef1 | ||
| permissions: | ||
| actions: read | ||
| checks: write |
| if: steps.gov.outputs.enabled == 'true' | ||
| run: | | ||
| set -euo pipefail | ||
| pip install --upgrade pip semgrep |
| - name: Install lint tools | ||
| run: | | ||
| set -euo pipefail | ||
| python -m pip install --upgrade pip |
| set -euo pipefail | ||
| python -m pip install --upgrade pip | ||
| if [ -f requirements-ci.txt ]; then pip install -r requirements-ci.txt; fi | ||
| pip install -e ".[dev]" || pip install -e . || \ |
| if [ -f requirements-ci.txt ]; then pip install -r requirements-ci.txt; fi | ||
| pip install -e ".[dev]" || pip install -e . || \ | ||
| echo "::notice::no local editable package to install" | ||
| command -v pytest >/dev/null 2>&1 || pip install pytest |
| pip install -e ".[dev]" || pip install -e . || \ | ||
| echo "::notice::no local editable package to install" | ||
| command -v pytest >/dev/null 2>&1 || pip install pytest | ||
| python -c "import pytest_cov" 2>/dev/null || pip install pytest-cov |
| echo "::notice::no local editable package to install" | ||
| command -v pytest >/dev/null 2>&1 || pip install pytest | ||
| python -c "import pytest_cov" 2>/dev/null || pip install pytest-cov | ||
| python -c "import xdist" 2>/dev/null || pip install pytest-xdist |
| command -v pytest >/dev/null 2>&1 || pip install pytest | ||
| python -c "import pytest_cov" 2>/dev/null || pip install pytest-cov | ||
| python -c "import xdist" 2>/dev/null || pip install pytest-xdist | ||
| python -c "import pytest_timeout" 2>/dev/null || pip install pytest-timeout |
…-in, semgrep strict-mode) Ports Quantum-L9/l9-ci-core@d5e0f31 into this branch's copied preset files.
| python -m pip install --upgrade pip | ||
| if [ -f requirements-ci.txt ]; then pip install -r requirements-ci.txt; fi | ||
| command -v ruff >/dev/null 2>&1 || pip install ruff | ||
| command -v mypy >/dev/null 2>&1 || pip install mypy |
…-in, semgrep strict-mode) Ports Quantum-L9/l9-ci-core@d5e0f31 into this branch's copied preset files.
…-in, semgrep strict-mode) Ports Quantum-L9/l9-ci-core@d5e0f31 into this branch's copied preset files.
Ports Quantum-L9/l9-ci-core@1b026c1 into this branch's copied preset files. Adds semgrep-identity-map.yaml + semgrep-policy.yaml, points quality-thresholds.yaml at the policy file, restores strict: true now that identity resolution is satisfiable, and passes identity-map to the normalize step.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Activates the locked
l9-ci-corepython preset (semgrep governed analysis + lint/test hygiene).Discovered config:
{ "SOURCE_DIR": ".", "TEST_DIR": "tests/" }Source:
Quantum-L9/l9-ci-core/presets/python.