template-python/.github/workflows/weekly.yml at main · markurtz/template-python · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
---
# =============================================================================
# weekly.yml
#
# Trigger:  Cron 00:00 UTC every Sunday + manual workflow_dispatch
# Purpose:  Dependency hygiene, full test suite regression.
# =============================================================================
name: "CI — Weekly"
on:
  schedule:
    - cron: "0 0 * * 0"  # 00:00 UTC every Sunday
  workflow_dispatch:  # Allow manual trigger
permissions:
  contents: read
  security-events: write
jobs:

  # ── Stage 1: Security Audit ────────────────────────────────────────────────
  security:
    name: "Security Audit"
    uses: ./.github/workflows/_security.yml

  # ── Stage 2: Full Test Suite ───────────────────────────────────────────────
  test:
    name: "Full Verification Suite"
    uses: ./.github/workflows/_tests.yml
    with:
      test_matrix: >-
        [
          {"level": "unit", "types": "smoke, sanity, regression"},
          {"level": "integration", "types": "smoke, sanity, regression", "coverage": true},
          {"level": "e2e", "types": "smoke, sanity, regression", "coverage": true}
        ]
      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
      generate_coverage: false
      publish_results: true
      retention_days: 14