Repository navigation

Grant packages:write permissions #7

	name: OpsAgent CI/CD

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	permissions:
	contents: read
	packages: write

	jobs:
	lint-and-test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.12'

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install flake8 pytest httpx fastapi uvicorn kubernetes groq python-dotenv pydantic aiofiles types-requests
	if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
	pip list

	- name: Lint with flake8
	run: \|
	flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics --exclude=venv,frontend,node_modules,__pycache__,.js,.jsx,.css,.html,*.json

	- name: Test with pytest
	run: \|
	python -m pytest -v
	env:
	GROQ_API_KEY: ${{ secrets.GROQ_API_KEY }}
	SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

	build-docker:
	needs: lint-and-test
	runs-on: ubuntu-latest
	if: github.event_name == 'push' && github.ref == 'refs/heads/main'
	steps:
	- uses: actions/checkout@v4

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Log in to GitHub Container Registry
	uses: docker/login-action@v3
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Lowercase repo name
	run: echo "REPO_LOWER=${GITHUB_REPOSITORY,,}" >> $GITHUB_ENV

	- name: Build and push
	uses: docker/build-push-action@v5
	with:
	context: .
	push: true
	tags: ghcr.io/${{ env.REPO_LOWER }}:latest