Skip to content

Conversation

@rampyg
Copy link
Collaborator

@rampyg rampyg commented Jan 3, 2026

Summary

Adds ruff static analysis to the CI pipeline, meeting OpenSSF Best Practices requirements.

Changes

  • New: .github/workflows/lint.yml - Runs ruff on PRs and main
  • Updated: pyproject.toml - Ruff configuration (lint.select, lint.ignore)
  • Fixed: vouch/kms.py - Unused variable warning

Ruff Configuration

[tool.ruff.lint]
select = ["E", "F", "B", "A"]
ignore = ["E501", "F401", "W293", "B904"]

OpenSSF Requirement Met

static_analysis: At least one static code analysis tool MUST be applied before release

Closes

Closes #10

- Add .github/workflows/lint.yml for ruff checks on PRs
- Update pyproject.toml with ruff lint configuration
- Fix unused variable in vouch/kms.py
- All checks now pass

Closes #10

Signed-off-by: Ramprasad Gaddam <[email protected]>
@rampyg rampyg merged commit e9375f2 into main Jan 3, 2026
7 of 10 checks passed
@rampyg rampyg deleted the feature/issue-10-ruff-static-analysis branch January 3, 2026 09:09
rampyg added a commit that referenced this pull request Jan 3, 2026
- Add .github/workflows/lint.yml for ruff checks on PRs
- Update pyproject.toml with ruff lint configuration
- Fix unused variable in vouch/kms.py
- All checks now pass

Closes #10

Signed-off-by: Ramprasad Gaddam <[email protected]>
Co-authored-by: Ramprasad Gaddam <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: Add static analysis (ruff) to CI

2 participants