feat(infra): phase 7 docker-compose end-to-end #8

	name: ci

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	python:
	name: python
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: install uv
	uses: astral-sh/setup-uv@v3
	with:
	version: "latest"
	- name: install python
	run: uv python install 3.11
	- name: ruff check
	run: uvx ruff check .
	- name: ruff format check
	run: uvx ruff format --check .

	typescript:
	name: typescript
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: setup node
	uses: actions/setup-node@v4
	with:
	node-version: 20
	- name: setup pnpm
	uses: pnpm/action-setup@v4
	with:
	version: 9.12.0
	- name: install
	run: pnpm install --frozen-lockfile=false
	- name: lint
	run: pnpm -r --if-present lint
	- name: typecheck
	run: pnpm -r --if-present typecheck

	dco:
	name: dco
	runs-on: ubuntu-latest
	if: github.event_name == 'pull_request'
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: check signed-off-by
	run: \|
	base="${{ github.event.pull_request.base.sha }}"
	head="${{ github.event.pull_request.head.sha }}"
	missing=0
	for sha in $(git rev-list "$base".."$head"); do
	if ! git log -1 --format=%B "$sha" \| grep -qE '^Signed-off-by: '; then
	echo "::error::commit $sha missing Signed-off-by"
	missing=1
	fi
	done
	exit $missing

Provide feedback