Aliia Bashirova, LAB07, SD-03 #16

	name: Python CI

	on:
	push:
	paths:
	- "app_python/**"
	- ".github/workflows/python-ci.yml"
	pull_request:
	paths:
	- "app_python/**"

	jobs:
	test-and-build:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repo
	uses: actions/checkout@v4

	- name: Cache pip dependencies
	uses: actions/cache@v3
	with:
	path: ~/.cache/pip
	key: ${{ runner.os }}-pip-${{ hashFiles('app_python/requirements.txt') }}
	restore-keys: \|
	${{ runner.os }}-pip-

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"

	- name: Install dependencies
	run: \|
	pip install --upgrade pip
	pip install -r app_python/requirements.txt

	- name: Run tests
	run: \|
	cd app_python
	pytest

	- name: Docker login
	uses: docker/login-action@v3
	with:
	username: ${{ secrets.DOCKERHUB_USERNAME }}
	password: ${{ secrets.DOCKERHUB_TOKEN }}

	- name: Set Docker image version
	run: echo "VERSION=$(date +%Y.%m.%d)" >> $GITHUB_ENV

	- name: Build and push Docker image
	uses: docker/build-push-action@v6
	with:
	context: app_python
	push: true
	tags: \|
	${{ secrets.DOCKERHUB_USERNAME }}/devops-info-python:${{ env.VERSION }}
	${{ secrets.DOCKERHUB_USERNAME }}/devops-info-python:latest

	- name: Install Snyk
	run: npm install -g snyk

	- name: Run Snyk test
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	run: snyk test --all-projects --severity-threshold=high

Provide feedback