ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Python 3.12
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"
          cache: pip

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements.txt
          pip install ruff

      - name: Lint with ruff
        run: ruff check .

      - name: Run tests (fast suite, no Splunk + no Foundation-Sec)
        env:
          SPLUNK_HOST: localhost
          SPLUNK_MGMT_PORT: "8089"
          SPLUNK_WEB_PORT: "8000"
          SPLUNK_TOKEN: ci-placeholder-token-not-validated
          SPLUNK_VERIFY_SSL: "false"
          OLLAMA_HOST: http://localhost:11434
          OLLAMA_MODEL: hf.co/gabriellarson/Foundation-Sec-8B-Instruct-GGUF:Q4_K_M
          OLLAMA_FALLBACK_MODEL: llama3.1:8b
          SPLUNK_MCP_URL: ""
          SPLUNK_MCP_TOKEN: ""
          AGENTGATE_AUDIT_INDEX: agentgate_audit
          AGENTGATE_HEC_URL: https://localhost:8088/services/collector/event
          AGENTGATE_HEC_TOKEN: ""
        run: pytest tests/test_injection.py -v