merge everything in Iris.yml #2

	name: Iris sync
	on:
	schedule:
	# Nightly job
	- cron: "0 2 * * *"
	workflow_dispatch:
	push:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	shadow-scans:
	name: Shadow Scans
	runs-on: sonar-s-public
	permissions:
	id-token: write
	contents: write
	steps:
	- name: Checkout code
	uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0

	- name: Configure Poetry
	uses: ./.github/actions/config-poetry

	- name: Run tests and type checking
	run: \|
	poetry run pytest --cov-report=xml:coverage.xml --cov-config=pyproject.toml --cov=src --cov-branch tests
	poetry run mypy src/ > mypy-report.txt \|\| true

	- name: Build with SonarSource Poetry action
	uses: SonarSource/ci-github-actions/build-poetry@v1
	with:
	sonar-platform: next
	run-shadow-scans: true

	iris:
	name: IRIS Sync
	needs: shadow-scans
	runs-on: sonar-s-public
	if: github.ref == 'refs/heads/master'
	permissions:
	id-token: write
	contents: write
	steps:
	- name: Run IRIS Analysis
	uses: SonarSource/unified-dogfooding-actions/run-iris@v1
	with:
	primary_project_key: "SonarSource_sonar-scanner-python"
	primary_platform: "Next"
	shadow1_project_key: "SonarSource_sonar-scanner-python"
	shadow1_platform: "SQC-EU"
	shadow2_project_key: "SonarSource_sonar-scanner-python"
	shadow2_platform: "SQC-US"

Provide feedback