ci.yaml

name: Continuous integration
on:
  push:
    branches-ignore:
      - "main"
  pull_request:

jobs:
  pyproject-lock-file-check:
    name: Check pyproject syntax
    runs-on: ubuntu-latest
    container: python:3.9-slim
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install required packages
        run: pip install poetry
      - name: Check pyproject.toml syntax and consistency with poetry.lock
        run: poetry check
  format-code:
    name: Check code format
    runs-on: ubuntu-latest
    container: python:3.9-slim
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install required packages
        run: |
          apt update
          apt install -y python3-poetry make
      - name: Create virtual environment
        run: make init
      - name: Check code format
        run: make check-format
  format-import:
    name: Check imports format
    runs-on: ubuntu-latest
    container: python:3.9-slim
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install required packages
        run: |
          apt update
          apt install -y python3-poetry make
      - name: Create virtual environment
        run: make init
      - name: Check code import format
        run: make check-import-sorting
  lint-style:
    name: Check code style
    runs-on: ubuntu-latest
    container: python:3.9-slim
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install required packages
        run: |
          apt update
          apt install -y python3-poetry make
      - name: Create virtual environment
        run: make init
      - name: Check code style
        run: make check-style
  lint-typing:
    name: Check static typing
    runs-on: ubuntu-latest
    container: python:3.9-slim
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install required packages
        run: |
          apt update
          apt install -y python3-poetry make libglib2.0-dev
      - name: Create virtual environment
        run: make init
      - name: Check code static typing
        run: make check-typing
  lint-flatpak-metadata:
    name: Check flatpak metadata
    runs-on: ubuntu-latest
    container: ghcr.io/flathub/flatpak-builder-lint:latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Check appstream metadata
        run: flatpak-builder-lint appstream meta/com.nitrokey.nitrokey-app2.metainfo.xml
  check-version-accordance-rpm-spec:
    name: Check for version accordance with RPM specification file
    runs-on: ubuntu-latest
    container: fedora:latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install required packages
        run: |
          dnf makecache
          dnf install -y gcc make poetry python python-pip python3-devel rpm-build systemd-devel which
      - name: Create virtual environment
        run: make init
      - name: Check versions
        shell: bash
        run: |
          PACKAGE_VERSION=$(poetry version --short)
          RPM_VERSION=$(rpmspec -q --qf "%{version}" ci-scripts/linux/rpm/nitrokey-app2.spec)
          if [ $PACKAGE_VERSION == $RPM_VERSION ]; then exit 0; else exit 1; fi
  check-version-accordance-flatpak-metadata:
    name: Check for version accordance with Flatpak metadata file
    runs-on: ubuntu-latest
    container: python:3.9-slim
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install required packages
        run: |
          apt update
          apt install -y make python3-poetry
      - name: Create virtual environment
        run: make init
      - name: Check versions
        shell: bash
        run: |
          PACKAGE_VERSION=$(poetry version --short)
          FLATPAK_VERSION=$(python -c "import xml.etree.ElementTree as ET; print(ET.parse('meta/com.nitrokey.nitrokey-app2.metainfo.xml').getroot().find('releases')[0].get('version'))")
          if [ $PACKAGE_VERSION == $FLATPAK_VERSION ]; then exit 0; else exit 1; fi