security(supply-chain): verify access-module integrity via pinned com… #440

	name: Unit Tests and Lint
	on: [push]
	permissions:
	contents: read

	jobs:
	build:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ['3.12', '3.13', '3.14']
	steps:
	- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
	with:
	python-version: ${{ matrix.python-version }}
	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install pytest "setuptools<81"
	pip install -r requirements.txt
	- name: Ensure Config
	run: cp config.json.sample config.json
	- name: Setup access modules code base
	run: python -m scripts.clone_access_modules
	- name: Ensure access modules dependencies
	run: \|
	pip install -r Access/access_modules/requirements.txt --no-cache-dir --ignore-installed
	- name: Lint code base
	run: \|
	pip install "setuptools<81"
	python -m pylama Access/accessrequest_helper.py scripts bootprocess
	- name: Test with pytest
	# pylama ships a pytest plugin with the removed pytest_collect_file(path,...)
	# signature that pytest 9 rejects. Linting runs as its own step, so disable
	# the redundant pytest integration here.
	run: python -m pytest -v --cov --disable-warnings -p no:pylama

Provide feedback