From a271a6bef7c532f4cc3bc91810849cbf19bfc520 Mon Sep 17 00:00:00 2001
From: fztee <tferreira@fuzzinglabs.com>
Date: Wed, 12 Nov 2025 12:00:33 +0100
Subject: [PATCH] chore: update Gitlab CI and add Makefile (backend package)
 with code quality commands to run.

---
 .github/workflows/test.yml |  6 +++++-
 backend/Makefile           | 19 +++++++++++++++++++
 2 files changed, 24 insertions(+), 1 deletion(-)
 create mode 100644 backend/Makefile

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9f79b46..1368fbc 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -110,7 +110,7 @@ jobs:
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install ruff mypy
+          pip install ruff mypy bandit
 
       - name: Run ruff
         run: ruff check backend/src backend/toolbox backend/tests backend/benchmarks --output-format=github
@@ -119,6 +119,10 @@ jobs:
         run: mypy backend/src backend/toolbox || true
         continue-on-error: true
 
+      - name: Run bandit (continue on error)
+        run: bandit --recursive backend/src || true
+        continue-on-error: true
+
   unit-tests:
     name: Unit Tests
     runs-on: ubuntu-latest
diff --git a/backend/Makefile b/backend/Makefile
new file mode 100644
index 0000000..33dd73d
--- /dev/null
+++ b/backend/Makefile
@@ -0,0 +1,19 @@
+SOURCES=./src
+TESTS=./tests
+
+.PHONY: bandit format mypy pytest ruff
+
+bandit:
+	uv run bandit --recursive $(SOURCES)
+
+format:
+	uv run ruff format $(SOURCES) $(TESTS)
+
+mypy:
+	uv run mypy $(SOURCES) $(TESTS)
+
+pytest:
+	PYTHONPATH=./toolbox uv run pytest $(TESTS)
+
+ruff:
+	uv run ruff check --fix $(SOURCES) $(TESTS)