pythonapp.yml

name: Python matrix CI

on:
  pull_request:
  workflow_dispatch:

jobs:
  build:

    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest, macos-14]
        python-version: ['3.10', '3.11', '3.12']
      fail-fast: false
    steps:
    - uses: actions/checkout@v4
    - name: Set up Python
      uses: actions/setup-python@v5
      with:
        python-version: ${{ matrix.python-version }}
    - name: Display Python version
      run: python -c "import sys; print(sys.version)"
    - name: Use Node.js
      uses: actions/setup-node@v4
      with:
        node-version: '22.x'
    - name: Set up JDK
      uses: actions/setup-java@v4
      with:
        distribution: 'temurin'
        java-version: '21'
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install ".[dev]"
    - name: Lint with flake8
      run: |
        flake8 . --count --show-source --exit-zero --statistics
    - name: Test with pytest
      run: |
        pytest --cov=vdb test
      env:
        PYTHONPATH: .
        TEST_VDB_HOME: vdb_data
    - name: Generate SBOM with cdxgen
      run: |
        npm install -g @cyclonedx/cdxgen
        cdxgen -t python -o bom.json . -p --profile research
        pip install ".[all]"
        python vdb/cli.py --download-image
        python vdb/cli.py --bom bom.json
    - name: CLI tests
      run: |
        python vdb/cli.py --search "pkg:maven/org.springframework/spring-core@6.0.13"