Nightly Build & Test #68

	name: Nightly Build & Test

	on:
	schedule:
	- cron: '0 3 * * *'
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: false

	jobs:
	nightly:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ["3.11", "3.12"]
	steps:
	- uses: actions/checkout@v4

	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}

	- name: Install dependencies
	run: pip install -e ".[dev]"

	- name: Lint
	run: ruff check src/ tests/

	- name: Type check
	run: mypy src/edb/ --ignore-missing-imports

	- name: Test with coverage
	run: pytest --cov=edb --cov-report=xml --cov-report=term-missing -v

	- name: Security scan - secrets
	run: \|
	pip install detect-secrets
	detect-secrets scan --all-files --baseline .secrets.baseline \|\| true

	- name: Security scan - dependencies
	run: \|
	pip install pip-audit
	pip-audit --strict \|\| true

	frontend:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Use Node.js 22.x
	uses: actions/setup-node@v4
	with:
	node-version: 22.x
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Type check
	run: npx tsc --noEmit

	- name: Build
	run: npm run build

Provide feedback