lint_python.yml

name: lint_python
on: [pull_request, push, workflow_dispatch]
jobs:
  lint_python:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          cache: pip
          cache-dependency-path: .github/workflows/lint_python.yml
      - run: pip install --upgrade pip wheel
        # TODO: remove setuptools installation when safety==2.4.0 is released
      - run: pip install --upgrade bandit black codespell flake8 flake8-bugbear
                         flake8-comprehensions isort mypy pyupgrade safety setuptools
      - run: bandit --recursive --skip B101,B404,B603 .
      - run: black --diff .
      - run: codespell --ignore-words-list="commitish"
      - run: flake8 . --count --ignore=C408,E203,F841,W503 --max-complexity=10
                      --max-line-length=143 --show-source --statistics
      - run: isort --check-only --profile black .
      - run: pip install --editable .
      - run: mypy --ignore-missing-imports --install-types --non-interactive .
      - run: shopt -s globstar && pyupgrade --py38-plus **/*.py || true
      # # Ignore CVE-2023-5752, we're not using that pip or feature
      - run: safety check --ignore 62044