The cicd.py module#

Summary#

CICD

CI/CD rule family.

CI001

At least one workflow file exists under .github/workflows.

CI002

A labeler action is used in the workflows.

CI003

The check-vulnerabilities action is used.

CI004

The code-style action is used.

CI005

The doc-changelog action is used.

CI006

The doc-style action is used.

CI007

The doc-build action is used.

CI008

The build-wheelhouse action is used.

CI009

The tests-pytest action is used.

CI010

The release-github action is used.

CI011

The check-actions-security action is used.

CI012

The build-library action is used.

CI013

The doc-deploy-dev action is used.

CI014

The doc-deploy-stable action is used.

CI015

The doc-deploy-changelog action is used.

CI016

Actions use immutable commit SHAs instead of mutable tags.

Description#

CI/CD content checks.

This rule set validates the GitHub Actions workflow policy for repository automation. Every .yml and .yaml file directly under .github/workflows is searched as text.

The checks cover:

  • At least one workflow file exists

  • Required ansys/actions reusable actions are used

  • Action references are pinned to immutable commit SHAs