Switch CI pipelines to exclusively GitHub Actions

- Replace flake8 checks with ruff
- Switch to pypi trusted publishers
- Use fancy GHA pytest output

.github/workflows/build_and_test.yml

@@ -0,0 +1,76 @@
+name: Build and Test
+
+on:
+  push:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: 3.11
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install pytest build
+      - name: Build distribution
+        run: |
+          python -m build
+          pip install dist/*.whl
+      - uses: actions/upload-artifact@v3
+        with:
+          path: ./dist/*
+
+  test:
+    needs: build
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.8", "3.9", "3.10", "3.11"]
+
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/download-artifact@v3
+        with:
+          name: artifact
+          path: dist
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install pytest dist/*.whl -r requirements_dev.txt pytest-md pytest-emoji
+      - name: Run pytest
+        uses: pavelzw/pytest-action@b09a85cd1831cbaae76125fcae4a1e4b137ef026 # v2.1.3
+        with:
+          emoji: true
+          job-summary: true
+          custom-arguments: "-v -ra --cov=zocalo --cov-report=xml --cov-branch"
+          custom-pytest: "PYTHONDEVMODE=1 pytest"
+          report-title: "Test Report"
+      - name: Upload Coverage to Codecov
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
+
+  pypi-publish:
+    name: Upload release to PyPI
+    needs: test
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
+    runs-on: ubuntu-latest
+    environment:
+      name: release
+      url: https://pypi.org/watchdir
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v3
+        with:
+          name: artifact
+          path: dist
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@b7f401de30cb6434a1e19f805ff006643653240e

.github/workflows/codeql.yml

@@ -2,7 +2,7 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ "main", "master" ]
+    branches: ["main"]
   pull_request:
     branches: [ "main" ]
   schedule:

.github/workflows/linting.yml

@@ -0,0 +1,16 @@
+name: "Linting"
+
+on:
+  push:
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+
+    - name: Ruff Check
+      uses: jpetrucciani/ruff-check@33f3725e751a187bb666b7d7a7094d38a2df12db # 0.0.239

pyproject.toml

@@ -88,6 +88,9 @@ profile = "black"
 
 [tool.pytest.ini_options]
 required_plugins = "pytest-mock requests-mock"
+testpaths = [
+    "tests",
+]
 
 [tool.ruff]
 line-length = 88