workflow.yml

name: Workflow

on:
  push:
    branches: [ main ]
  pull_request: { }

jobs:
  required-meta:
    permissions:
      contents: read
      checks: write
      pull-requests: write
    uses: BlindfoldedSurgery/actions-meta/.github/workflows/required.yml@v1

  lint:
    uses: BlindfoldedSurgery/actions-python/.github/workflows/lint.yml@v5
    with:
      build-tool: uv
      python-version: '3.13'

  test:
    uses: BlindfoldedSurgery/actions-python/.github/workflows/test.yml@v5
    with:
      build-tool: uv
      python-version: '3.13'

  build-container-image:
    needs:
      - lint
      - test
    uses: preparingforexams/actions-container/.github/workflows/build-dual-image-kaniko.yml@v5
    with:
      push-image: ${{ github.ref_name == github.event.repository.default_branch }}

  post-build-container-image:
    runs-on: ubuntu-24.04
    if: github.event_name == 'pull_request'
    needs: build-container-image
    steps:
      - run: echo "All images built"

  deploy:
    runs-on: ubuntu-24.04
    if: github.ref_name == github.event.repository.default_branch
    permissions:
      contents: write
    needs:
      - build-container-image
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - run: git push origin main:release

  clean:
    concurrency: cleanup
    needs: [ deploy ]
    uses: preparingforexams/actions-container/.github/workflows/clean.yml@v5