feat(cyber): detect leaked secrets in responses, not just submitted flags #342

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	checks:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6

	- name: Install uv
	uses: astral-sh/setup-uv@v7
	with:
	version: "0.10.11"
	enable-cache: true

	- name: Set up Python
	uses: actions/setup-python@v6
	with:
	python-version: "3.14"

	- name: Install dependencies
	run: uv sync --locked --group dev

	- name: Lint
	run: uv run ruff check .

	- name: Check core/pack boundary
	run: bash scripts/check_boundary.sh

	- name: Typecheck
	run: uv run mypy src tests examples main.py packages/openrange-trl/src

	- name: Test with coverage
	run: uv run coverage run -m pytest tests

	- name: Enforce coverage
	run: uv run coverage report

Navigation Menu