Merge pull request #808 from chuckwondo/netrc-issue-480

Use temp .netrc file for integration tests and support NETRC environment variable

.github/actions/install-pkg/action.yml

@@ -21,4 +21,4 @@ runs:
 
     - name: Install package and test dependencies
       shell: bash
-      run: pip install .[test]
+      run: pip install --root-user-action ignore ".[test]"

.github/workflows/integration-test.yml

@@ -47,14 +47,19 @@ jobs:
 
     steps:
       - name: Fetch user permission
+        if: github.event_name == 'pull_request_target'
         id: permission
         uses: actions-cool/check-user-permission@v2
         with:
           require: write
           username: ${{ github.triggering_actor }}
 
       - name: Check user permission
-        if: ${{ steps.permission.outputs.require-result == 'false' }}
+        # The name of the output require-result is a bit confusing, but when its value
+        # is 'false', it means that the triggering actor does NOT have the required
+        # permission.
+        if: github.event_name == 'pull_request_target' && steps.permission.outputs.require-result == 'false'
+
         # If the triggering actor does not have write permission (i.e., this is a
         # PR from a fork), then we exit, otherwise most of the integration tests will
         # fail because they require access to secrets.  In this case, a maintainer
@@ -78,8 +83,6 @@ jobs:
         env:
           EARTHDATA_USERNAME: ${{ secrets.EDL_USERNAME }}
           EARTHDATA_PASSWORD: ${{ secrets.EDL_PASSWORD }}
-          EARTHACCESS_TEST_USERNAME: ${{ secrets.EDL_USERNAME }}
-          EARTHACCESS_TEST_PASSWORD: ${{ secrets.EDL_PASSWORD }}
         run: ./scripts/integration-test.sh
 
       - name: Upload coverage report

.github/workflows/test-mindeps.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version-file: pyproject.toml
+          python-version: 3.9
 
       - name: Install minimum-compatible dependencies
         run: uv sync --resolution lowest-direct --extra test

.gitignore

@@ -9,6 +9,7 @@ htmlcov
 dist
 site
 .coverage
+.coverage.*
 coverage.xml
 .netlify
 test.db