deploy.yml

name: CI Security Check

on:
  push:
    branches: [ "main" ] 

jobs:
  security-and-build:
    name: Build and Hardened Scan
    runs-on: ubuntu-latest
    
    steps:
      - name: Checkout Source Code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0 
          
      - name: Scan for secrets (TruffleHog)
        uses: trufflesecurity/trufflehog@main
        with:
          path: ./
          extra_args: --only-verified

      - name: Set up Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.12'

      - name: Install Dependencies
        run: |
          python -m pip install --upgrade pip
          pip install pytest  # <--- Added this to fix "No module named pytest"
          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi

      - name: Run Pytest
        run: |
          python -m pytest tests/