- config.py: stop writing API_KEY to .immich_config.json; direct users to .env instead. Resolves CodeQL py/clear-text-storage-sensitive-data. - test.yml, lint.yml: add permissions: contents: read to satisfy actions/missing-workflow-permissions scanner. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
30 lines
510 B
YAML
30 lines
510 B
YAML
name: Test Python
|
|
|
|
on:
|
|
push:
|
|
branches: ["main", "dev"]
|
|
pull_request:
|
|
branches: ["main", "dev"]
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install uv
|
|
uses: astral-sh/setup-uv@v4
|
|
|
|
- name: Set up Python
|
|
run: uv python install 3.12
|
|
|
|
- name: Install dependencies
|
|
run: uv sync --all-extras
|
|
|
|
- name: Run tests
|
|
run: uv run pytest
|
|
|