Knowledge tuning push tests #12

	name: Code Quality and Security

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	workflow_dispatch: # Allows manual triggering from GitHub UI

	jobs:
	linting-and-formatting:
	name: Linting and Formatting
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.11'

	- name: Install Ruff
	run: pip install ruff

	- name: Run Ruff linter
	run: ruff check . --output-format=github

	- name: Run Ruff formatter check
	run: ruff format --check .

	- name: Run Markdownlint
	uses: nosborn/github-action-markdown-cli@v3.3.0
	with:
	files: .
	config_file: .markdownlint.json
	ignore_files: .gitignore

	secret-scanning:
	name: Secret Scanning
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Run Gitleaks
	uses: gitleaks/gitleaks-action@v2
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.11'

	- name: Run Talisman
	uses: carhartl/talisman-secrets-scan-action@v1.3.0
	continue-on-error: true
	if: github.event_name == 'pull_request'
	with:
	local-ref: ${{ github.event.pull_request.head.sha }}
	remote-ref: origin/${{ github.event.pull_request.base.ref }}

Provide feedback