---
name: Lint Python issues

on:
  push:
  pull_request:
    branches: [main]

permissions:
  contents: read

jobs:
  python-lint-job:
    runs-on: ubuntu-latest

    permissions:
      # required for all workflows
      security-events: write
    steps:
      - name: Repository checkout
        uses: actions/checkout@v4

      - name: VCS Diff Lint
        uses: fedora-copr/vcs-diff-lint-action@v1
        id: VCS_Diff_Lint
        with:
          linter_tags: |
            ruff
            pylint

      - name: Upload artifact with detected defects in SARIF format
        uses: actions/upload-artifact@v4
        with:
          name: VCS Diff Lint SARIF
          path: ${{ steps.VCS_Diff_Lint.outputs.sarif }}
        if: ${{ always() }}

      - name: Upload SARIF to GitHub using github/codeql-action/upload-sarif
        uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: ${{ steps.VCS_Diff_Lint.outputs.sarif }}
        if: ${{ always() }}
