tests.yml

name: Code Quality Check

on:
  push:
    branches: [ main, develop ]
  pull_request:
    branches: [ main, develop ]

jobs:
  check:
    runs-on: ubuntu-latest
    
    strategy:
      matrix:
        python-version: ['3.10', '3.11']

    steps:
    - uses: actions/checkout@v3
    
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v4
      with:
        python-version: ${{ matrix.python-version }}
    
    - name: Cache pip packages
      uses: actions/cache@v3
      with:
        path: ~/.cache/pip
        key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }}
        restore-keys: |
          ${{ runner.os }}-pip-
    
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install -r requirements.txt
        pip install flake8 pytest
    
    - name: Lint with flake8
      run: |
        # Stop the build if there are Python syntax errors or undefined names
        flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
        # exit-zero treats all errors as warnings
        flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
      continue-on-error: true
    
    - name: Verify requirements.txt
      run: |
        pip install pipdeptree
        pipdeptree
    
    - name: Check app.py exists and is valid Python
      run: |
        python -m py_compile app.py
        python -c "import streamlit as st; print('Streamlit OK')"
    
    - name: Verify key modules can be imported
      run: |
        python -c "from transformers import AutoModelForSequenceClassification, AutoTokenizer; print('Transformers OK')"
        python -c "import torch; print('PyTorch OK')"
        python -c "import pandas; print('Pandas OK')"

  security:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    
    - name: Run Bandit security check
      uses: gaurav-nelson/github-action-bandit@v1
      with:
        path: "."
      continue-on-error: true