server-ci-dev.yml

name: Python CI

on:
    push:
      paths:
      - "server/**"
      branches:
          - dev
    
    pull_request:
      paths:
      - "server/**"
      branches:
          - dev

jobs:
  build:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./server

    steps:
    - name: Checkout the Git Repository
      uses: actions/checkout@v4

    - name: Set up Python
      uses: actions/setup-python@v5
      with:
        python-version: 3.11.9

    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install -r requirements.txt
        
    - name: Run tests
      run: |
        pytest tests/


  security_check:
    name: Run security checks with Bandit
    runs-on: ubuntu-latest
    steps:
      - uses: mdegis/bandit-action@v1.0
        with:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          path: "."
          level: high
          confidence: high
          exit_zero: true