[tox]
envlist = py310, static, static-tests, security
isolated_build = true
skip_missing_interpreters = true

[testenv]
description = Run the tests
require_locked_deps = true
require_poetry = true
locked_deps =
    pytest
    pytest-cov
    toml
commands =
    pytest {toxinidir}/tests/ \
      --cov {toxinidir}/section7 \
      --cov-config {toxinidir}/.coveragerc \
      --cov-report term-missing

[testenv:static]
description = Static formatting and quality enforcement
platform = linux
ignore_errors = true
locked_deps =
    black
    blacken-docs
    mdformat
    mdformat-gfm
    mypy
    reorder-python-imports
    pre-commit
    pre-commit-hooks
    pylint
    types-toml
commands =
    pre-commit run \
      --all-files
    pylint {toxinidir}/section7/ \
      --rcfile {toxinidir}/.pylintrc
    mypy {toxinidir}/section7/ \
      --ignore-missing-imports \
      --no-strict-optional

[testenv:static-tests]
description = Static formatting and quality enforcement for the tests
platform = linux
ignore_errors = true
locked_deps =
    pylint
    pytest
    mypy
    types-toml
commands =
    pylint {toxinidir}/tests/ \
      --rcfile {toxinidir}/.pylintrc
    mypy {toxinidir}/tests/ \
      --ignore-missing-imports \
      --no-strict-optional

[testenv:security]
description = Security checks
platform = linux
ignore_errors = true
skip_install = true
locked_deps =
    bandit
    safety
    poetry
commands =
    bandit {toxinidir}/section7/ \
      --recursive \
      --quiet
    bandit {toxinidir}/tests/ \
      --recursive \
      --quiet \
      --skip B101
    poetry export \
      --format requirements.txt \
      --output {envtmpdir}/requirements.txt \
      --without-hashes \
      --dev
    safety check \
      --file {envtmpdir}/requirements.txt \
      --json