name: lint_python
on: [pull_request, push]
jobs:
  lint_python:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: actions/setup-python@v6
        with:
          python-version: '3.10'
      - run: pip install --upgrade pip wheel
      - run: pip install --upgrade "setuptools<81"
      - run: pip install bandit "black>=26.3.1" codespell flake8 flake8-bugbear
                         flake8-comprehensions isort mypy "pytest>=9.0.3" pyupgrade "safety<3"
      - run: safety generate policy_file --path .
      - run: bandit --recursive  --skip B101,B314,B404,B405,B602,B603,B607 .
      - run: black --check . || true
      - run: codespell --ignore-words-list="anumber,ba,nd,ser,te,tring" || true  # --skip="*.css,*.js,*.lock"
      - run: flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
      - run: flake8 . --count --exit-zero --max-complexity=10 --max-line-length=88
                      --show-source --statistics
      - run: isort --check-only --profile black . || true
      - run: pip install -r requirements.txt || pip install --editable . || true
      - run: mkdir --parents --verbose .mypy_cache
      - run: mypy --ignore-missing-imports --install-types --non-interactive . || true
      - run: pytest . || true
      - run: pytest --doctest-modules . || true
      - run: shopt -s globstar && pyupgrade --py36-plus **/*.py || true
      - run: safety check
