deer-flow/.github/workflows/skill-review-ci.yml

114 lines
3.5 KiB
YAML

name: Skill Review CI
on:
push:
branches: ["main", "2.1.x-dev"]
paths:
- "skills/public/**"
- "tests/skills/**"
- "backend/packages/harness/deerflow/skills/review/**"
- "contracts/skill_review/**"
- "scripts/review_changed_public_skills.py"
- "scripts/skill_review_waivers.py"
- ".github/skill-review-waivers.v1.json"
- "backend/pyproject.toml"
- "backend/uv.lock"
- ".github/workflows/skill-review-ci.yml"
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
paths:
- "skills/public/**"
- "tests/skills/**"
- "backend/packages/harness/deerflow/skills/review/**"
- "contracts/skill_review/**"
- "scripts/review_changed_public_skills.py"
- "scripts/skill_review_waivers.py"
- ".github/skill-review-waivers.v1.json"
- "backend/pyproject.toml"
- "backend/uv.lock"
- ".github/workflows/skill-review-ci.yml"
concurrency:
group: skill-review-ci-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
skill-tests:
if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
runs-on: ubuntu-latest
timeout-minutes: 10
env:
# Test imports must not leave .pyc files in the reviewed skill packages.
PYTHONDONTWRITEBYTECODE: "1"
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.12"
- name: Install uv
uses: astral-sh/setup-uv@v7
with:
# Keep this aligned with backend/Dockerfile and the review job below.
version: "0.11.1"
- name: Install skill test dependencies
working-directory: backend
run: uv sync --locked --group dev
- name: Run public skill script tests
working-directory: backend
run: |
# Fail instead of silently skipping data-analysis tests on missing extras.
uv run --locked python -c "import duckdb, openpyxl, requests"
uv run --locked python -m pytest ../tests/skills -q -rs
skill-review:
if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- name: Checkout
uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.12"
- name: Install uv
uses: astral-sh/setup-uv@v7
with:
# Must match backend/Dockerfile's UV_IMAGE tag; pinned by backend/tests/test_ci_uv_version_pin.py
version: "0.11.1"
- name: Install backend dependencies
working-directory: backend
run: uv sync --group dev
- name: Review changed public skills (pull request)
if: github.event_name == 'pull_request'
working-directory: backend
run: |
uv run python ../scripts/review_changed_public_skills.py \
--base-ref "${{ github.event.pull_request.base.sha }}" \
--head-ref "${{ github.event.pull_request.head.sha }}"
- name: Review changed public skills (push)
if: github.event_name == 'push'
working-directory: backend
run: |
uv run python ../scripts/review_changed_public_skills.py \
--before "${{ github.event.before }}" \
--after "${{ github.event.after }}"