name: Code Quality

on:
  pull_request:
    branches: [main, release/*]
  schedule:
    - cron: "0 0 * * *" # Nightly
  workflow_dispatch: # On-demand

# Cancel previous runs if new commit is pushed to the same PR
concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
  cancel-in-progress: true

jobs:
  code-quality:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"
      - name: Secret Scanning
        uses: trufflesecurity/trufflehog@v3.90.5
        with:
          extra_args: --results=verified,unknown
      - name: Run code quality checks
        run: pip install tox && tox -e pre-commit-all