Merge pull request #926 from voxpupuli/dependabot/pip/coverage-7.3.1 #828

	name: tests (unit)

	# trigger on pushes to master OR PRs to master
	# to prevent double tests on PRs within this repo
	on:
	push:
	branches:
	- master
	pull_request:
	branches:
	- master

	jobs:
	test:

	runs-on: ubuntu-latest

	strategy:
	max-parallel: 5
	matrix:
	python-version: [3.8, 3.9, '3.10', 3.11]

	steps:
	- uses: actions/checkout@v4
	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v4
	with:
	python-version: ${{ matrix.python-version }}
	- name: Install dependencies
	run: \|
	pip install --upgrade wheel setuptools
	python setup.py develop
	pip install -r requirements-test.txt
	mypy --install-types --non-interactive puppetboard/ test/
	- name: Test
	run: \|
	pytest --cov=. --cov-report=xml --strict-markers --mypy -v puppetboard test
	pylint --errors-only puppetboard test
	- name: Upload coverage to Codecov
	uses: codecov/[email protected]
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	fail_ci_if_error: true

	build_docker_image:
	name: 'Test building a container'
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4
	- name: Build Docker image
	uses: docker/build-push-action@v5
	with:
	context: .
	push: false

	security-tests:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Set up Python 3.11
	uses: actions/setup-python@v4
	with:
	python-version: 3.11
	- name: Install dependencies
	run: \|
	pip install bandit
	- name: Run bandit
	run: \|
	bandit -r puppetboard

	tests:
	needs:
	- test
	- security-tests
	runs-on: ubuntu-latest
	name: Test suite
	steps:
	- run: echo Test suite completed

Provide feedback