ci.yml

name: ci

'on':
  push:
  pull_request:

jobs:
  python:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-python@v5
        with:
          python-version: "3.10"

      - name: Sanity check (no obvious secrets)
        run: |
          set -euo pipefail
          if grep -RIn --exclude-dir=.git --exclude-dir=trash --exclude=.env.example -E 'sk-[A-Za-z0-9]{20,}' .; then
            echo "Potential API key found in repository files." >&2
            exit 1
          fi
          if grep -RIn --exclude-dir=.git --exclude-dir=trash -E 'AKIA[0-9A-Z]{16}' .; then
            echo "Potential AWS access key found in repository files." >&2
            exit 1
          fi

      - name: Install dependencies
        run: |
          python -m pip install -U pip
          python -m pip install -r requirements.txt

      - name: Python syntax check
        run: |
          python -m py_compile scripts/p_hacking_agent.py scripts/extract_within_paper_metrics.py