Skip to content
Tests

Apply GitHub Actions security best practices #211

Sign in to view logs

Apply GitHub Actions security best practices

Apply GitHub Actions security best practices #211

Workflow file for this run

.github/workflows/test.yml at b5bdd2d
name: Tests
on:
push:
branches: main
pull_request:
permissions:
contents: read
jobs:
test:
name: Test
runs-on: ubuntu-latest
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
with:
egress-policy: audit
- name: Setup Python
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
with:
python-version: '3.10'
- name: Check out code
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install poetry
poetry install
- name: Test
run: |
poetry run pytest src/tests --cov=./ --cov-report=xml