chore(ci): create Python backend CI workflow (linting job) (#9)

Author: richardesp

.github/workflows/python-ci.yml

@@ -0,0 +1,42 @@
+name: Python CI
+
+on:
+  pull_request:
+    paths:
+      - "api/**"
+      - ".github/workflows/python-ci.yml"
+      - ".secrets.baseline"
+  push:
+    branches: [main]
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Ruff format check
+        working-directory: api
+        run: uvx [email protected] format . --check
+
+      - name: Ruff linting check
+        working-directory: api
+        run: uvx [email protected] check .
+
+      - name: Detect Secrets
+        run: |
+          git ls-files -z | xargs -0 uvx --from git+https://github.com/IBM/[email protected]+ibm.64.dss \
+            detect-secrets-hook --baseline .secrets.baseline

.pre-commit-config.yaml

@@ -18,4 +18,4 @@ repos:
         # when "--baseline" without "--use-all-plugins", pre-commit scan with just plugins in baseline file
         # when "--baseline" with "--use-all-plugins", pre-commit scan with all available plugins
         # add "--fail-on-unaudited" to fail pre-commit for unaudited potential secrets
-        args: [--baseline, .secrets.baseline, --use-all-plugins]
+        args: [--baseline, .secrets.baseline, --use-all-plugins]

.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "package-lock.json|tsconfig.tsbuildinfo|^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2025-10-29T16:10:27Z",
+  "generated_at": "2025-12-17T15:55:17Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -77,28 +77,20 @@
     }
   ],
   "results": {
-    "Doc/setup.md": [
+    "AGENTS.md": [
       {
-        "hashed_secret": "11fa7c37d697f30e6aee828b4426a10f83ab2380",
-        "is_secret": false,
-        "is_verified": false,
-        "line_number": 151,
-        "type": "Secret Keyword",
-        "verified_result": null
-      },
-      {
-        "hashed_secret": "b3b3595b8540a184df1f9953a7a8e4ee056a803a",
-        "is_secret": false,
+        "hashed_secret": "829c3804401b0727f70f73d4415e162400cbe57b",
         "is_verified": false,
-        "line_number": 176,
+        "line_number": 116,
         "type": "Secret Keyword",
         "verified_result": null
-      },
+      }
+    ],
+    "CONTRIBUTING.md": [
       {
-        "hashed_secret": "235ca8ecd22dbaae08d2971367bebdc1d1bd0224",
-        "is_secret": false,
+        "hashed_secret": "829c3804401b0727f70f73d4415e162400cbe57b",
         "is_verified": false,
-        "line_number": 224,
+        "line_number": 68,
         "type": "Secret Keyword",
         "verified_result": null
       }
@@ -154,15 +146,15 @@
         "hashed_secret": "829c3804401b0727f70f73d4415e162400cbe57b",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 301,
+        "line_number": 389,
         "type": "Secret Keyword",
         "verified_result": null
       },
       {
         "hashed_secret": "958f57f57d72a30f329ee5538f21b0257a49a46e",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 353,
+        "line_number": 441,
         "type": "Secret Keyword",
         "verified_result": null
       }

api/pyproject.toml

@@ -0,0 +1,19 @@
+[tool.ruff]
+target-version = "py313"
+line-length = 88
+
+[tool.ruff.lint]
+# E: pycodestyle (PEP 8)
+# F: Pyflakes (unused variables, imports, etc.)
+# I: isort (import sorting)
+select = ["E", "F", "I"]
+
+# Temporary ignore this rules when updating existing code
+ignore = ["E402", "I001", "E501"]
+
+[tool.ruff.lint.per-file-ignores]
+# Ignore specific rules in specific files (e.g., .ipynb)
+# E402: Module level import not at top of file
+# I001: isort found an import in the wrong position
+# E501: Line too long
+"api/Code/*.ipynb" = ["E402", "I001", "E501"]