feat: added to ci actions

Author: ZanderConner

.github/workflows/ci.yml

@@ -5,34 +5,44 @@ on:
   pull_request:
 
 concurrency:
-  group: frc-ci-${{ github.ref }}
+  group: ci-${{ github.ref }}
   cancel-in-progress: true
 
 permissions:
   contents: read
 
 jobs:
-  ruff:
+  ci:
     runs-on: ubuntu-latest
+
     steps:
       - uses: actions/checkout@v4
 
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
+          cache: pip
 
-      - name: Ruff (Python linter and code formatter)
+      - name: Install dependencies
         run: |
-          curl -LsSf https://astral.sh/uv/install.sh | sh
-          uv tool install ruff@latest
-          ruff check
+          python -m pip install --upgrade pip
+          pip install -r requirements-dev.txt
+          pip install -e .
 
-      - name: MyPy(Static Typing for Python)
-        run: |
-          python3 -m pip install -U mypy
-          mypy ./
+      - name: Ruff (lint)
+        run: ruff check .
 
-      - name: Python build
-        run: |
-          python3 -m build
-      
+      - name: Ruff (format check)
+        run: ruff format --check .
+
+      - name: MyPy (typing)
+        run: mypy .
+
+      - name: Bandit (static security)
+        run: bandit -q -r SecureShell_Password_Manager
+
+      - name: pip-audit (dependency vulnerabilities)
+        run: pip-audit
+
+      - name: Build (sdist + wheel)
+        run: python -m build

pyproject.toml

@@ -0,0 +1,28 @@
+[tool.ruff]
+line-length = 88
+target-version = "py312"
+
+# While scaffolded, ignore the most common placeholder triggers:
+# F401 = unused imports, F841 = assigned but unused
+# You can remove these later as the project matures.
+lint.select = ["E", "F"]
+lint.ignore = ["F401", "F841"]
+
+# If you want to “lock down” just syntax+fatal errors for now, use:
+# lint.select = ["E9", "F63", "F7", "F82"]
+
+[tool.ruff.lint.per-file-ignores]
+# If some modules are mostly skeletons, you can loosen them specifically:
+"SecureShell_Password_Manager/auth.py" = ["F401"]
+"SecureShell_Password_Manager/storage.py" = ["F401"]
+"SecureShell_Password_Manager/tui.py" = ["F401"]
+
+[tool.mypy]
+python_version = "3.12"
+# This is the big one for 3rd party libs like cryptography:
+ignore_missing_imports = true
+
+# While scaffolded, don’t fail the whole build over typing yet:
+warn_unused_ignores = true
+warn_redundant_casts = true
+pretty = true

requirments-dev.txt

@@ -0,0 +1,6 @@
+ruff
+mypy
+build
+pip-audit
+bandit
+pytest