Initial commit

tox.ini

@@ -0,0 +1,84 @@
+[tox]
+envlist = py310, static, static-tests, security
+isolated_build = true
+skip_missing_interpreters = true
+
+[testenv]
+description = Run the tests
+require_locked_deps = true
+require_poetry = true
+locked_deps =
+    pytest
+    pytest-cov
+    toml
+commands =
+    pytest {toxinidir}/tests/ \
+      --cov {toxinidir}/section7 \
+      --cov-config {toxinidir}/.coveragerc \
+      --cov-report term-missing
+
+[testenv:static]
+description = Static formatting and quality enforcement
+platform = linux
+ignore_errors = true
+locked_deps =
+    black
+    blacken-docs
+    mdformat
+    mdformat-gfm
+    mypy
+    reorder-python-imports
+    pre-commit
+    pre-commit-hooks
+    pylint
+    types-toml
+commands =
+    pre-commit run \
+      --all-files
+    pylint {toxinidir}/section7/ \
+      --rcfile {toxinidir}/.pylintrc
+    mypy {toxinidir}/section7/ \
+      --ignore-missing-imports \
+      --no-strict-optional
+
+[testenv:static-tests]
+description = Static formatting and quality enforcement for the tests
+platform = linux
+ignore_errors = true
+locked_deps =
+    pylint
+    pytest
+    mypy
+    types-toml
+commands =
+    pylint {toxinidir}/tests/ \
+      --rcfile {toxinidir}/.pylintrc
+    mypy {toxinidir}/tests/ \
+      --ignore-missing-imports \
+      --no-strict-optional
+
+[testenv:security]
+description = Security checks
+platform = linux
+ignore_errors = true
+skip_install = true
+locked_deps =
+    bandit
+    safety
+    poetry
+commands =
+    bandit {toxinidir}/section7/ \
+      --recursive \
+      --quiet
+    bandit {toxinidir}/tests/ \
+      --recursive \
+      --quiet \
+      --skip B101
+    poetry export \
+      --format requirements.txt \
+      --output {envtmpdir}/requirements.txt \
+      --without-hashes \
+      --dev
+    safety check \
+      --file {envtmpdir}/requirements.txt \
+      --json