devcontainer.yml

name: DevContainer

on:
  push:
    branches: [main, dev]
  pull_request:
    branches: [main, dev]

permissions:
  contents: read

jobs:
  devcontainer:
    name: DevContainer Build & Test
    runs-on: ubuntu-latest

    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
        with:
          egress-policy: audit

      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Cache Docker layers
        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
        with:
          path: /tmp/.buildx-cache
          key: devcontainer-${{ runner.os }}-${{ github.sha }}
          restore-keys: |
            devcontainer-${{ runner.os }}-

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0

      - name: Build DevContainer image
        uses: devcontainers/ci@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6 # v0.3.1900000417
        with:
          runCmd: |
            echo "Installing test dependencies..."
            pip install -e .[development,docs,casts]

            echo "Running pre-commit checks..."
            pre-commit run --all-files

            echo "Running unit tests..."
            python -m pytest tests

            echo "Building documentation..."
            make -C doc html
            make -C doc/landing-page html