New github action flow (#3180)

* Test new github action flow

.github/workflows/pypi.yaml → .github/workflows/cd-pypi.yaml

@@ -1,4 +1,4 @@
-name: Upload Python Package
+name: "[CD] Upload to pypi"
 
 on:
   release:

.github/workflows/test.yaml → .github/workflows/ci-branch.yaml

@@ -1,6 +1,6 @@
-name: Testing
+name: "[CI] Test branch"
 
-on: [push, pull_request]
+on: [push]
 
 jobs:
   unitlint:

.github/workflows/ci-pr-coverage.yaml

@@ -0,0 +1,31 @@
+name: "[CI] Upload PR coverage"
+
+on:
+  workflow_run:
+    workflows: ["[CI] Test PR"]
+    types:
+      - completed
+
+jobs:
+  upload-coverage:
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download All Artifacts
+        uses: actions/download-artifact@v4
+        with:
+          pattern: coverage-*
+          merge-multiple: true
+
+      - name: Upload coverage report
+        if: '!cancelled()'
+        uses: codecov/codecov-action@v3
+        with:
+          override_commit: ${{ github.event.workflow_run.head_sha }}
+          override_pr: ${{ github.event.workflow_run.pull_requests[0].number }}
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: "coverage-*.xml"
+          fail_ci_if_error: true
+          verbose: true

.github/workflows/ci-pr.yaml

@@ -0,0 +1,73 @@
+name: "[CI] Test PR"
+
+on: [pull_request]
+
+jobs:
+  unitlint:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        python: [ 3.8, 3.9, "3.10", "3.11", "3.12" ]
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Install Tox and any other packages
+        run: pip install tox
+      - name: Run Tox
+        run: |
+          tox -e style
+          tox -e type
+          tox -e py
+        env:
+          COVERAGE_FILE: ".coverage.${{ matrix.python }}"
+      - name: Store coverage file
+        uses: actions/upload-artifact@v4
+        if: matrix.os == 'ubuntu-latest'
+        with:
+          name: coverage-${{ matrix.python }}
+          path: .coverage.${{ matrix.python }}
+  integration:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        python: [3.8]
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Install cfn-lint
+        run: |
+          pip3 install -e .
+      - name: Run cfn-lint
+        run: |
+          cfn-lint test/fixtures/templates/good/generic.yaml
+          cat test/fixtures/templates/good/generic.yaml | cfn-lint
+  dependencies:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest]
+        python: [3.8]
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Install cfn-lint
+        run: |
+          pip3 install -e .
+          pip install --upgrade pip
+          pip install --upgrade setuptools
+      - uses: pypa/gh-action-pip-audit@v1.0.8
+        with:
+          ignore-vulns: |
+            GHSA-r9hx-vwmv-q579

tox.ini

@@ -7,6 +7,7 @@ commands =
   coverage run -m unittest discover -s {posargs:test}
   coverage xml
 skip_install = True
+passenv = COVERAGE_FILE
 deps =
   coverage>=7.2.1
   pydot