lint-python.yml

name: Ruff

on:
  push:
    paths:
      - "**.py"
      - .github/workflows/lint-python.yml
      - pyproject.toml
  pull_request:
    paths:
      - "**.py"
      - pyproject.toml
  workflow_dispatch:

jobs:
  ruff:
    strategy:
      fail-fast: false
      matrix:
        os:
          - ubuntu-latest
        python-version:
          - "3.12"
          - "3.11"
          - "3.10"

    runs-on: ${{ matrix.os }}

    permissions:
      security-events: write
      actions: read
      contents: read

    steps:
      - uses: actions/checkout@v4

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip

      - name: Install uv and create venv
        run: |
          pip install -U pip uv
          uv venv

      - name: Enable macOS/Linux venv
        if: runner.os != 'Windows'
        run: |
          source .venv/bin/activate
          echo $PATH >> $GITHUB_PATH

      - name: Enable Windows venv
        if: runner.os == 'Windows'
        run: |
          .venv\Scripts\activate
          echo $env:path >> $ENV:GITHUB_PATH

      - name: Install dependencies
        run: |
          uv pip install -e .[dev]
          
      - name: Lint the code with ruff
        run: |
          ruff check $(git ls-files '*.py') --output-format sarif -o results.sarif

      - name: Upload SARIF file
        uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: results.sarif
          category: ruff