name: CI

on:
  push:
    branches: ['main']
  pull_request:
    branches: ['**']

jobs:
  test:
    name: Tests, lint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: '3.12'
      - name: Install
        # Pinned: a newer ruff or shellcheck can turn an untouched tree red.
        run: pip install pytest==8.4.2 ruff==0.14.0 pyyaml==6.0.2 shellcheck-py==0.11.0.1
      - name: ruff
        run: ruff format --check . && ruff check .
      - name: shellcheck
        run: shellcheck bin/*.sh image_tools/cis_os.sh
      - name: pytest
        run: pytest -q