ci.yml

name: Checks

on:
  pull_request:
    branches: ['**']
  push:
    branches: ['main']

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

jobs:
  python:
    name: Python
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Setup Virtualenv Cache
        uses: actions/cache@v4.0.0
        with:
          path: .venv
          key: ${{ runner.os }}-poetry-${{ hashFiles('poetry.lock') }}
          restore-keys: |
            ${{ runner.os }}-poetry-
      - name: Set up Python 3.10
        uses: actions/setup-python@v5.0.0
        with:
          python-version: "3.10.13"
      - name: Setup Poetry
        uses: Gr1N/setup-poetry@v9
      - name: Install Python Dependencies
        run: |
          poetry check --lock
          poetry install --no-root
      - name: Check poetry config
        run: poetry check
      - name: Lint Python code
        run: |
          poetry run ruff format . --check
          poetry run ruff check .
      - name: Check type annotations
        run: poetry run mypy
      - name: Check if requirements.txt is up-to-date
        run: poetry export --output requirements.txt | git diff --exit-code
      - name: Audit Python dependencies
        run: poetry run pip-audit --requirement requirements.txt 
        continue-on-error: true
  Container:
    name: Container
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Run the checks inside Docker
        uses: addnab/docker-run-action@v3
        with:
          image: amazon/aws-glue-libs:glue_libs_4.0.0_image_01
          options: --volume ${{ github.workspace }}:/home/glue_user/workspace
          run: |
            pip3 install --no-warn-script-location --user --upgrade pip==24.0 
            pip3 install --no-warn-script-location --user -r requirements.txt
            /home/glue_user/.local/bin/ruff format . --check --no-cache
            /home/glue_user/.local/bin/ruff check . --no-cache
            /home/glue_user/.local/bin/mypy
            /home/glue_user/.local/bin/pytest -p no:cacheprovider
  shell:
    name: Shell
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Check shell scripts
        uses: ludeeus/action-shellcheck@2.0.0
        with:
          scandir: '.'
  dockerfile:
    name: Dockerfile
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Validate Dockerfile using hadolint
        uses: hadolint/hadolint-action@v3.1.0