ci.yml

name: CI

on:
  push:
  pull_request:

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ["3.10", "3.12", "3.14"]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - run: python -m pip install .
      - run: python -m unittest discover -s tests -v

  action-smoke-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - id: sheriff
        uses: ./
        with:
          base: HEAD^
          comment: "false"
          mode: advisory
      - name: Verify Action outputs
        env:
          RISK: ${{ steps.sheriff.outputs.risk }}
          POLICY_PASSED: ${{ steps.sheriff.outputs.policy-passed }}
        run: |
          test -n "$RISK"
          test "$POLICY_PASSED" = "true" -o "$POLICY_PASSED" = "false"