name: CI

on:
  push:
    branches:
      - main

jobs:
  ci:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      - name: Install uv
        uses: astral-sh/setup-uv@v6.5.0
        with:
          enable-cache: true

      - name: Install the project
        run: uv sync --locked --all-extras --dev

      - name: Run formatter
        run: uv run ruff format --check

      - name: Run linter
        run: uv run ruff check

      - name: Run tests
        run: uv run pytest
        env:
          VAULT_TOKEN: ${{ secrets.VAULT_TOKEN }}