diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index a54c43f..0e7439b 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -24,9 +24,22 @@ jobs:
- name: Install project deps (including test extras)
run: |
- poetry install --with test
+ poetry install --with dev
- name: Run test script
run: |
./tests.sh
+ # Notify if any previous step in this job failed
+ - name: Notify on failure
+ if: ${{ failure() }}
+ env:
+ WEBHOOK_URL: ${{ secrets.NODERED_WEBHOOK_URL }}
+ REPOSITORY: ${{ forgejo.repository }}
+ RUN_NUMBER: ${{ forgejo.run_number }}
+ SERVER_URL: ${{ forgejo.server_url }}
+ run: |
+ curl -X POST \
+ -H "Content-Type: application/json" \
+ -d "{\"repository\":\"$REPOSITORY\",\"run_number\":\"$RUN_NUMBER\",\"status\":\"failure\",\"url\":\"$SERVER_URL/$REPOSITORY/actions/runs/$RUN_NUMBER\"}" \
+ "$WEBHOOK_URL"
diff --git a/.forgejo/workflows/lint.yml b/.forgejo/workflows/lint.yml
index 60768d8..a8ba06d 100644
--- a/.forgejo/workflows/lint.yml
+++ b/.forgejo/workflows/lint.yml
@@ -15,7 +15,7 @@ jobs:
run: |
apt-get update
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
- black pyflakes3 python3-bandit
+ black pyflakes3 python3-bandit vulture
- name: Run linters
run: |
@@ -24,3 +24,18 @@ jobs:
pyflakes3 src/*
pyflakes3 tests/*
bandit -s B110 -r src/
+ vulture .
+
+ # Notify if any previous step in this job failed
+ - name: Notify on failure
+ if: ${{ failure() }}
+ env:
+ WEBHOOK_URL: ${{ secrets.NODERED_WEBHOOK_URL }}
+ REPOSITORY: ${{ forgejo.repository }}
+ RUN_NUMBER: ${{ forgejo.run_number }}
+ SERVER_URL: ${{ forgejo.server_url }}
+ run: |
+ curl -X POST \
+ -H "Content-Type: application/json" \
+ -d "{\"repository\":\"$REPOSITORY\",\"run_number\":\"$RUN_NUMBER\",\"status\":\"failure\",\"url\":\"$SERVER_URL/$REPOSITORY/actions/runs/$RUN_NUMBER\"}" \
+ "$WEBHOOK_URL"
diff --git a/.forgejo/workflows/trivy.yml b/.forgejo/workflows/trivy.yml
index 18ced32..fad2f6f 100644
--- a/.forgejo/workflows/trivy.yml
+++ b/.forgejo/workflows/trivy.yml
@@ -24,3 +24,17 @@ jobs:
- name: Run trivy
run: |
trivy fs --no-progress --ignore-unfixed --format table --disable-telemetry .
+
+ # Notify if any previous step in this job failed
+ - name: Notify on failure
+ if: ${{ failure() }}
+ env:
+ WEBHOOK_URL: ${{ secrets.NODERED_WEBHOOK_URL }}
+ REPOSITORY: ${{ forgejo.repository }}
+ RUN_NUMBER: ${{ forgejo.run_number }}
+ SERVER_URL: ${{ forgejo.server_url }}
+ run: |
+ curl -X POST \
+ -H "Content-Type: application/json" \
+ -d "{\"repository\":\"$REPOSITORY\",\"run_number\":\"$RUN_NUMBER\",\"status\":\"failure\",\"url\":\"$SERVER_URL/$REPOSITORY/actions/runs/$RUN_NUMBER\"}" \
+ "$WEBHOOK_URL"
diff --git a/.gitignore b/.gitignore
index 2352872..dedc5da 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,7 @@ __pycache__
.pytest_cache
dist
.coverage
+*.yml
+*.j2
+*.toml
+regenerated_*
diff --git a/Dockerfile.debbuild b/Dockerfile.debbuild
new file mode 100644
index 0000000..8d185b1
--- /dev/null
+++ b/Dockerfile.debbuild
@@ -0,0 +1,85 @@
+# syntax=docker/dockerfile:1
+ARG BASE_IMAGE=debian:bookworm
+FROM ${BASE_IMAGE}
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+# If Ubuntu, ensure Universe is enabled.
+RUN set -eux; \
+ . /etc/os-release; \
+ if [ "${ID:-}" = "ubuntu" ]; then \
+ apt-get update; \
+ apt-get install -y --no-install-recommends software-properties-common ca-certificates; \
+ add-apt-repository -y universe; \
+ fi; \
+ if [ "${VERSION_CODENAME:-}" = "jammy" ]; then \
+ apt-get update; \
+ apt-get install -y --no-install-recommends python3-tomli; \
+ fi
+
+# Build deps
+RUN set -eux; \
+ apt-get update; \
+ apt-get install -y --no-install-recommends \
+ build-essential \
+ devscripts \
+ debhelper \
+ dh-python \
+ pybuild-plugin-pyproject \
+ python3-all \
+ python3-poetry-core \
+ python3-yaml \
+ python3-defusedxml \
+ python3-jinja2 \
+ python3-toml \
+ rsync \
+ ca-certificates \
+ ; \
+ rm -rf /var/lib/apt/lists/*
+
+# Build runner script
+RUN set -eux; \
+ cat > /usr/local/bin/build-deb <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+SRC="${SRC:-/src}"
+WORKROOT="${WORKROOT:-/work}"
+WORK="${WORKROOT}/src"
+OUT="${OUT:-/out}"
+
+mkdir -p "$WORK" "$OUT"
+
+rsync -a --delete \
+ --exclude '.git' \
+ --exclude '.venv' \
+ --exclude 'dist' \
+ --exclude 'build' \
+ --exclude '__pycache__' \
+ --exclude '.pytest_cache' \
+ --exclude '.mypy_cache' \
+ "${SRC}/" "${WORK}/"
+
+cd "${WORK}"
+if [ -n "${SUITE:-}" ]; then
+ export DEBEMAIL="mig@mig5.net"
+ export DEBFULLNAME="Miguel Jacq"
+
+ dch --distribution "$SUITE" --local "~${SUITE}" "CI build for $SUITE"
+fi
+dpkg-buildpackage -us -uc -b
+
+shopt -s nullglob
+cp -v "${WORKROOT}"/*.deb \
+ "${WORKROOT}"/*.changes \
+ "${WORKROOT}"/*.buildinfo \
+ "${WORKROOT}"/*.dsc \
+ "${WORKROOT}"/*.tar.* \
+ "${OUT}/" || true
+
+echo "Artifacts copied to ${OUT}"
+EOF
+RUN chmod +x /usr/local/bin/build-deb
+
+WORKDIR /work
+ENTRYPOINT ["/usr/local/bin/build-deb"]
diff --git a/README.md b/README.md
index e7bf5ea..80763f3 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,11 @@
# JinjaTurtle
+
+
+