Add bandit to CI #115

	name: "Test, Lint & Coverage"

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]
	# Allow manual triggering
	workflow_dispatch:

	jobs:
	test-python:
	runs-on: ubuntu-latest

	steps:
	- name: "Checkout source code"
	uses: actions/checkout@v4

	- name: "Install Poetry"
	run: pipx install poetry

	- name: "Install Python"
	uses: actions/setup-python@v5
	with:
	python-version: "3.12.3"
	cache: "poetry"

	- name: Install dependencies
	run: poetry install

	- name: "Run ruff format"
	run: poetry run ruff format

	- name: "Run ruff check"
	run: poetry run ruff check

	- name: "Run mypy"
	run: poetry run mypy .

	- name: "Run tests with coverage"
	run: poetry run pytest --cov=src --cov-report=xml --cov-report=term-missing

	- name: "Upload coverage to Code Climate"
	uses: paambaati/[email protected]
	env:
	CC_TEST_REPORTER_ID: ${{secrets.CC_TEST_REPORTER_ID}}
	with:
	debug: true

Provide feedback