#366 additional Renovate settings (#367) #154

	---
	name: CI

	on:
	workflow_dispatch:
	pull_request:
	branches:
	- main
	push:
	branches:
	- main

	jobs:
	security:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Perform gitleaks checks
	run: \|
	# Download and check
	curl -LJO https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz
	curl -LJO https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_checksums.txt
	shasum -a 256 --ignore-missing --quiet -c gitleaks_8.18.2_checksums.txt
	if [ $? != 0 ]; then exit 1; fi
	# Extract gitleaks
	tar -zxvf gitleaks_8.18.2_linux_x64.tar.gz gitleaks
	# Run gitleaks
	./gitleaks detect \
	--config .gitleaks.toml \
	--gitleaks-ignore-path .gitleaksignore \
	--no-git
	quality:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Setting up PDM
	uses: pdm-project/setup-pdm@v4
	with:
	python-version: "3.10"
	architecture: x64
	- name: Setting up nox
	uses: wntrblm/[email protected]
	with:
	python-versions: "3.10"
	- name: Performing lint checks
	run: nox -s lint
	- name: Performing static type checks
	run: nox -s check
	tests:
	strategy:
	matrix:
	os:
	- ubuntu-latest
	python-version:
	- "3.10"
	runs-on: ${{ matrix.os }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	lfs: true
	- name: Setting up PDM
	uses: pdm-project/setup-pdm@v4
	with:
	python-version: ${{ matrix.python-version }}
	architecture: x64
	- name: Setting up nox
	uses: wntrblm/[email protected]
	with:
	python-versions: ${{ matrix.python-version }}
	- name: Executing unit tests
	run: nox -s test

Provide feedback