build

CORE-1211: fix urllib3 high vuln in python #448

	name: build

	on:
	pull_request:
	branches:
	- main

	jobs:
	build:
	runs-on: ubuntu-latest

	strategy:
	fail-fast: false
	matrix:
	python-version: ["3.9", "3.10", "3.11", "3.12"]

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Install uv
	run: curl -LsSf https://astral.sh/uv/0.11.2/install.sh \| sh

	- name: Set up Python ${{ matrix.python-version }}
	run: uv python install ${{ matrix.python-version }}

	- name: Validate pyproject.toml instrumentation lines
	run: \|
	for d in instrumentations/opentelemetry-instrumentation-*; do
	inst=${d#*/opentelemetry-instrumentation-}
	grep -q "odigos-opentelemetry-instrumentation-$inst" pyproject.toml \
	\|\| { echo "❌ pyproject.toml missing odigos-opentelemetry-instrumentation-$inst"; exit 1; }
	done

	- name: Build all instrumentations
	run: make build-instrumentations

	- name: Sync workspace
	run: uv sync --python ${{ matrix.python-version }}

	- name: Smoke check imports
	run: \|
	uv run python -c "import initializer"
	uv run python -c "import opamp"

	- name: Freeze dependencies
	run: uv pip freeze > requirements.txt

	- name: Scan with critical-only failure
	uses: odigos-io/ci-core/vulnerabilities-scanner@main
	with:
	path: .
	severity-cutoff: "CRITICAL"

Navigation Menu