ci.yml

name: CI Pipeline - 4th.GRC

on:
  push:
    branches: [ main, develop ]
  pull_request:
    branches: [ main, develop ]

jobs:
  build-test:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.11'

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements.txt

      - name: Lint with flake8
        run: |
          pip install flake8
          flake8 policyengine services agents apps

      - name: Run tests
        run: |
          pytest -v --maxfail=3 --disable-warnings -q

      - name: Validate YAML Profiles
        run: |
          python scripts/validate_profiles.py

      - name: Check formatting with Black
        run: |
          pip install black
          black --check policyengine services agents apps

  security-scan:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Run Bandit Security Scan
        uses: py-actions/bandit@v1.0.2
        with:
          targets: "policyengine services agents apps"
          level: "high"