create-qa-architect 5.0.0

package/config/quality-config.schema.json

@@ -0,0 +1,97 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://github.com/brettstark73/create-qa-architect/blob/main/config/quality-config.schema.json",
+  "title": "Quality Automation Configuration",
+  "description": "Configuration for create-qa-architect progressive quality checks",
+  "type": "object",
+  "required": ["version"],
+  "properties": {
+    "version": {
+      "type": "string",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$",
+      "description": "Configuration schema version (semver format)"
+    },
+    "maturity": {
+      "type": "string",
+      "enum": [
+        "auto",
+        "minimal",
+        "bootstrap",
+        "development",
+        "production-ready"
+      ],
+      "default": "auto",
+      "description": "Project maturity level: 'auto' for auto-detection or manual override"
+    },
+    "detected": {
+      "type": "object",
+      "description": "Auto-detected project information (populated by --check-maturity)",
+      "properties": {
+        "level": {
+          "type": "string",
+          "enum": ["minimal", "bootstrap", "development", "production-ready"],
+          "description": "Detected maturity level"
+        },
+        "sourceFiles": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of source files detected"
+        },
+        "testFiles": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of test files detected"
+        },
+        "hasDocumentation": {
+          "type": "boolean",
+          "description": "Whether README or docs/ found"
+        },
+        "hasDependencies": {
+          "type": "boolean",
+          "description": "Whether package.json dependencies exist"
+        },
+        "detectedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of detection"
+        }
+      }
+    },
+    "checks": {
+      "type": "object",
+      "description": "Quality check configuration",
+      "additionalProperties": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "oneOf": [
+              {
+                "type": "boolean",
+                "description": "Explicitly enable (true) or disable (false) this check"
+              },
+              {
+                "type": "string",
+                "enum": ["auto"],
+                "description": "Auto-enable based on project maturity level"
+              }
+            ],
+            "default": "auto"
+          },
+          "required": {
+            "type": "boolean",
+            "default": false,
+            "description": "Whether this check is required to pass for CI/CD success"
+          },
+          "threshold": {
+            "type": "number",
+            "minimum": 0,
+            "maximum": 100,
+            "description": "Threshold percentage (e.g., coverage percentage for coverage checks)"
+          }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/config/quality-python.yml

@@ -0,0 +1,89 @@
+name: Python Quality Checks
+
+on:
+  push:
+    branches: [main, master, develop]
+  pull_request:
+    branches: [main, master, develop]
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ['3.8', '3.9', '3.10', '3.11', '3.12']
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: 'pip'
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          if [ -f requirements-dev.txt ]; then
+            pip install -r requirements-dev.txt
+          fi
+          if [ -f requirements.txt ]; then
+            pip install -r requirements.txt
+          fi
+
+      - name: Black formatting check
+        run: black --check .
+
+      - name: Ruff linting
+        run: ruff check .
+
+      - name: Import sorting check
+        run: isort --check-only --diff .
+
+      - name: Type checking with mypy
+        run: mypy .
+
+      - name: Security check with bandit
+        run: |
+          pip install bandit[toml]
+          bandit -r . -f json -o bandit-report.json || true
+          if [ -s bandit-report.json ]; then
+            echo "🔍 Security scan results:"
+            python -m json.tool bandit-report.json | head -50
+          fi
+
+      - name: Run tests
+        run: |
+          if [ -d tests ] || [ -f test_*.py ] || [ -f *_test.py ]; then
+            pytest --cov=. --cov-report=term-missing
+          else
+            echo "No tests found - skipping test execution"
+          fi
+
+      - name: Check for common Python security issues
+        run: |
+          echo "🔍 Scanning for Python security patterns..."
+
+          # Check for eval usage
+          if grep -r "eval(" . --include="*.py" --exclude-dir=venv --exclude-dir=.venv; then
+            echo "⚠️ Found eval() usage - review for security implications"
+          fi
+
+          # Check for exec usage
+          if grep -r "exec(" . --include="*.py" --exclude-dir=venv --exclude-dir=.venv; then
+            echo "⚠️ Found exec() usage - review for security implications"
+          fi
+
+          # Check for pickle usage (potential security risk)
+          if grep -r "pickle.loads\|pickle.load" . --include="*.py" --exclude-dir=venv --exclude-dir=.venv; then
+            echo "⚠️ Found pickle.load usage - ensure data source is trusted"
+          fi
+
+          # Check for SQL injection patterns
+          if grep -r "execute.*%\|execute.*format\|execute.*+.*" . --include="*.py" --exclude-dir=venv --exclude-dir=.venv; then
+            echo "⚠️ Potential SQL injection pattern found - use parameterized queries"
+          fi
+
+          echo "✅ Security pattern scan completed"

package/config/requirements-dev.txt

@@ -0,0 +1,15 @@
+# Code formatting and linting
+black~=24.8.0
+ruff~=0.6.9
+isort~=5.13.2
+mypy~=1.11.2
+
+# Pre-commit hooks
+pre-commit~=3.8.0
+
+# Testing
+pytest~=8.3.3
+pytest-cov~=5.0.0
+
+# Type stubs
+types-requests~=2.32.0