ci: pin actions workflow step hashes and use minimum permissions #24

	# For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions
	name: CI Build

	on:
	push:
	branches:
	- main
	- v2
	pull_request:

	jobs:
	build:
	# Avoiding -latest due to https://github.com/actions/setup-python/issues/162
	runs-on: ubuntu-20.04
	timeout-minutes: 5
	strategy:
	matrix:
	python-version: ["3.6", "3.7", "3.8", "3.9", "3.10", "3.11", "3.12"]
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false
	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
	with:
	python-version: ${{ matrix.python-version }}
	- name: Install dependencies
	run: \|
	pip install -U pip
	pip install -e .
	pip install -r requirements-dev.txt
	- name: Run all tests
	run: \|
	python_version=`python -V`
	if [ ${python_version:7:3} == "3.12" ]; then
	pip install -U flake8
	flake8 slackeventsapi
	pytest --cov-report= --cov=slackeventsapi tests && bash <(curl -s https://codecov.io/bash)
	else
	pytest tests
	fi

Provide feedback