feature: github actions integration (lints and tests)

Author: shenek

.github/workflows/audit.yml

@@ -0,0 +1,49 @@
+name: Security audit
+
+on:
+  schedule:
+    - cron: '0 0 1 * *'
+  push:
+    paths:
+      - '**/Cargo.toml'
+      - '**/poetry.lock'
+  pull_request:
+
+jobs:
+  audit-rust:
+    name: Run cargo security audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions-rs/audit-check@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+  audit-python:
+    name: Check for python security issues
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install poetry
+        run: |
+          curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python
+
+      - name: Install virtualenv
+        run: |
+          sudo apt-get install python3-venv
+
+      - name: Install dependencies
+        run: |
+          python3 -m venv /tmp/venv
+          source /tmp/venv/bin/activate
+          env PATH="${PATH}:${HOME}/.poetry/bin" poetry install
+
+      - name: Run bandit
+        run: |
+          source /tmp/venv/bin/activate
+          env PATH="${PATH}:${HOME}/.poetry/bin" poetry run bandit -r streamson/
+
+      - name: Run safety
+        run: |
+          source /tmp/venv/bin/activate
+          env PATH="${PATH}:${HOME}/.poetry/bin" poetry run safety check

.github/workflows/code-quality.yml

@@ -0,0 +1,74 @@
+on: [push]
+
+name: Code Quality
+
+jobs:
+  pre-commit:
+    name: Run pre-commit Lints
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Install rust nightly toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          profile: minimal
+          toolchain: nightly
+          override: true
+          components: rustfmt, clippy
+
+      - name: Setup python
+        uses: actions/setup-python@v2
+        with:
+          python-version: "3.8.x"
+
+      - name: Install poetry
+        run: |
+          curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python
+
+      - name: Install virtualenv
+        run: |
+          sudo apt-get install python3-venv
+
+      - name: Install dependencies
+        run: |
+          env PATH="${PATH}:${HOME}/.poetry/bin" poetry install
+
+      - name: Run pre-commit checks
+        run: |
+          env RUSTFLAGS="-D unused_crate_dependencies" PATH="${PATH}:${HOME}/.poetry/bin" poetry run pre-commit run --hook-stage push --all-files
+
+  tests-python:
+    name: Python ${{ matrix.python-version }} ${{ matrix.os }} tests
+    strategy:
+      matrix:
+        os: [ubuntu-latest]
+        python-version: ['3.6', '3.7', '3.8']
+    runs-on: ${{ matrix.os}}
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install rust nightly toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          profile: minimal
+          toolchain: nightly
+          override: true
+      - name: Setup python
+        uses: actions/setup-python@v2
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install poetry
+        run: |
+          curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python
+
+      - name: Install dependencies
+        run: |
+          env PATH="${PATH}:${HOME}/.poetry/bin" poetry install
+
+      - name: Build the project
+        run: |
+          env PATH="${PATH}:${HOME}/.poetry/bin" poetry run maturin develop
+
+      - name: Run tests
+        run: |
+          env PATH="${PATH}:${HOME}/.poetry/bin" poetry run pytest tests/

.gitignore

@@ -3,3 +3,4 @@
 *.swo
 *.swp
 .mypy_cache/
+poetry.lock

.pre-commit-config.yaml

@@ -11,22 +11,22 @@ repos:
 -   repo:  local
     hooks:
     -   id: black
-        name: Black formatter
+        name: "Python: Black formatter"
         entry: poetry run black --check
         language: system
         types: [python]
     -   id: flake8
-        name: Flake8 linter
+        name: "Python: Flake8 linter"
         entry: poetry run flake8
         language: system
         types: [python]
     -   id: isort
-        name: isort formatter
+        name: "Python: isort formatter"
         entry: poetry run isort -rc -c
         language: system
         types: [python]
     -   id: mypy
-        name: mypy linter
+        name: "Python: mypy linter"
         entry: poetry run mypy --config-file mypy.ini
         language: system
         types: [python]
@@ -35,5 +35,8 @@ repos:
     rev: master
     hooks:
     -   id: fmt
+        name: "Rust: fmt"
     -   id: cargo-check
+        name: "Rust: check"
     -   id: clippy
+        name: "Rust: clippy"