AutoModerate/.github/workflows/ci.yml

name: CI

on:
  push:
    branches: [ main, master ]
  pull_request:
    branches: [ main, master ]

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest
    
    strategy:
      matrix:
        python-version: ["3.12"]

    steps:
    - uses: actions/checkout@v7
    
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v7
      with:
        python-version: ${{ matrix.python-version }}
    
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install -r requirements.txt
        pip install pytest pytest-cov flake8
    
    - name: Lint with flake8
      run: |
        # stop the build if there are Python syntax errors or undefined names
        flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
        # exit-zero treats all errors as warnings
        flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
    
    - name: Test application startup
      env:
        FLASK_ENV: testing
        SECRET_KEY: test-secret-key
        DATABASE_URL: sqlite:///test.db
        OPENAI_API_KEY: test-key
      run: |
        # Test that the application can start without errors
        timeout 10s python -c "
        import os
        os.environ['FLASK_ENV'] = 'testing'
        from app import create_app
        app = create_app()
        print('Application created successfully')
        " || echo "Application startup test completed"
    
    - name: Check for security issues
      run: |
        pip install bandit
        bandit -r app/ -f json || true