Rework to use the debian docker based runner

.gitea/workflows/bandit.yml

@@ -1,17 +1,36 @@
 ---
 name: Bandit
-on: [push]
+on:
-
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
 
 # XXX need to do stuff with uv
 jobs:
-  build:
+  audit-runtime-security:
-    runs-on: freebsd
+    runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.11"]
+        python-version:
+          - "3.11"
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '${{ matrix.python-version }}'
+          cache: 'pip'
+          cache-dependency-path: 'requirements.txt'
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install --upgrade bandit
+          pip install -r requirements.txt
+
       - name: Analyse code with Bandit
         run: |
           bandit -r .

.gitea/workflows/flake8.yml

@@ -1,17 +1,35 @@
 ---
 name: Flake8
-on: [push]
+on:
-
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
 
 # XXX need to do stuff with uv
 jobs:
-  build:
+  audit:
-    runs-on: freebsd
+    runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.11"]
+        python-version:
+          - "3.11"
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '${{ matrix.python-version }}'
+          cache: 'pip'
+          cache-dependency-path: 'requirements.txt'
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install --upgrade flake8
+          pip install -r requirements.txt
       - name: Analyse code with Flake8
         run: |
           flake8 $(git ls-files '*.py')

.gitea/workflows/mypy.yml

@@ -1,17 +1,36 @@
 ---
 name: Mypy
-on: [push]
+on:
-
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
 
 # XXX need to do stuff with uv
 jobs:
-  build:
+  audit-typing:
-    runs-on: freebsd
+    runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.11"]
+        python-version:
+          - "3.11"
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '${{ matrix.python-version }}'
+          cache: 'pip'
+          cache-dependency-path: 'requirements.txt'
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install --upgrade mypy
+          pip install -r requirements.txt
+
       - name: Analyse code with Mypy
         run: |
           mypy --install-types --non-interactive $(git ls-files '*.py')

.gitea/workflows/pip-audit.yml

@@ -10,17 +10,17 @@ on:
 
 # XXX need to do stuff with uv
 jobs:
-  build:
+  audit-dependency-security:
     runs-on: ubuntu-latest
     strategy:
       matrix:
         python-version:
           - "3.11"
     steps:
-      - name: Checkout code
+      - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Set up Python ${{ matrix.python-version }}
+      - name: Set up Python
         uses: actions/setup-python@v4
         with:
           python-version: '${{ matrix.python-version }}'

.gitea/workflows/pylint.yml

@@ -1,17 +1,35 @@
 ---
 name: Pylint
-on: [push]
+on:
-
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
 
 # XXX need to do stuff with uv
 jobs:
-  build:
+  audit-runtime-security:
-    runs-on: freebsd
+    runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.11"]
+        python-version:
+          - "3.11"
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '${{ matrix.python-version }}'
+          cache: 'pip'
+          cache-dependency-path: 'requirements.txt'
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install --upgrade pylint
+          pip install -r requirements.txt
       - name: Analyse code with Pylint
         run: |
           pylint $(git ls-files '*.py')