ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.11"
      - name: Install package with dev dependencies
        run: |
          pip install --upgrade pip setuptools
          pip install -e ".[dev]"
      - name: Lint (ruff)
        run: ruff check src tests
      - name: Type check (mypy)
        run: mypy src
      - name: Test
        run: pytest --cov=detection_as_code --cov-report=term-missing
      - name: Security scan (bandit)
        run: bandit -q -r src
      - name: Dependency vulnerability scan (pip-audit)
        run: pip-audit
      - name: Lint the example rule
        run: python -m detection_as_code.cli lint examples/rules/windows_suspicious_scheduled_task.yaml