name: CI/CD Pipeline
on:
push:
branches: [ main, master, develop ]
pull_request:
branches: [ main, master, develop ]
workflow_dispatch:
jobs:
test:
name: Test on Python ${{ matrix.python-version }}
runs-on: ${{ matrix.os }}
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, windows-latest, macos-latest]
python-version: ["3.10", "3.11", "3.12"]
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v5
with:
python-version: ${{ matrix.python-version }}
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e ".[dev,gui]"
- name: Run tests with coverage
run: |
pytest test_server.py -v --cov=. --cov-report=xml --cov-report=term-missing --tb=short
- name: Upload coverage to Codecov
if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.11'
uses: codecov/codecov-action@v4
with:
files: ./coverage.xml
fail_ci_if_error: false
lint:
name: Code Quality Checks
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.11"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install ruff mypy
- name: Run Ruff (linter)
run: |
ruff check server.py cli.py test_server.py || true
- name: Check code formatting
run: |
ruff format --check server.py cli.py test_server.py || true
integration-test:
name: Integration Tests
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.11"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e .
- name: Test CLI commands
run: |
python cli.py stats
echo "CLI works successfully"
- name: Test server import
run: |
python -c "from server import KnowledgeBase; print('Server imports successfully')"
docs:
name: Documentation Check
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Check README exists
run: |
test -f README.md && echo "README.md found" || exit 1
- name: Check CLAUDE.md exists
run: |
test -f CLAUDE.md && echo "CLAUDE.md found" || exit 1
- name: Verify documentation completeness
run: |
grep -q "Installation" README.md || exit 1
grep -q "Usage" README.md || exit 1
echo "Documentation appears complete"
security:
name: Security Checks
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.11"
- name: Install security tools
run: |
python -m pip install --upgrade pip
pip install safety bandit[toml]
- name: Run safety check (dependency vulnerabilities)
run: |
pip install -e ".[dev,gui]"
safety check --json || true
continue-on-error: true
- name: Run bandit security linter
run: |
bandit -r server.py cli.py -f json -o bandit-report.json || true
continue-on-error: true
- name: Upload security reports
uses: actions/upload-artifact@v4
if: always()
with:
name: security-reports-${{ github.sha }}
path: bandit-report.json
retention-days: 30
build-status:
name: Build Status Summary
runs-on: ubuntu-latest
needs: [test, lint, integration-test, docs, security]
if: always()
steps:
- name: Check build status
run: |
echo "Test Status: ${{ needs.test.result }}"
echo "Lint Status: ${{ needs.lint.result }}"
echo "Integration Test Status: ${{ needs.integration-test.result }}"
echo "Docs Status: ${{ needs.docs.result }}"
echo "Security Status: ${{ needs.security.result }}"
if [[ "${{ needs.test.result }}" == "success" && \
"${{ needs.lint.result }}" == "success" && \
"${{ needs.integration-test.result }}" == "success" && \
"${{ needs.docs.result }}" == "success" ]]; then
echo "✅ All CI checks passed!"
exit 0
else
echo "❌ Some CI checks failed"
exit 1
fi
