Lint

Fix zizmor reports #385

	name: Lint

	on:
	push:
	branches:
	- master
	pull_request:

	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	lint-python:
	name: Lint Python with Ruff and mypy
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
	with:
	persist-credentials: false

	- name: Install uv
	uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 # v7.1.4
	with:
	enable-cache: true
	cache-dependency-glob: "uv.lock"

	- name: Set up Python
	run: uv python install 3.11

	- name: Install dependencies
	run: uv sync --extra lint

	- name: Check formatting with ruff
	run: uv run ruff format --check .

	- name: Lint with ruff
	run: uv run ruff check fickling

	- name: Type check with mypy
	run: uv run mypy fickling
	continue-on-error: true # TODO: Remove once type annotations are fixed

	all-lints-pass:
	name: All lints pass
	if: always()
	permissions:
	contents: read
	needs:
	- lint-python

	runs-on: ubuntu-latest

	steps:
	- name: check test jobs
	uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
	with:
	jobs: ${{ toJSON(needs) }}

Provide feedback