🔧[#42] add HSTS & CSP settings #153

	name: Run CI

	# Run this workflow every time a new commit pushed to your repository
	on:
	push:
	branches:
	- main
	tags:
	- '*'
	pull_request:
	workflow_dispatch:

	jobs:
	tests:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python: ['3.9', '3.10', '3.11', '3.12']
	django: ['4.2']

	name: Run the test suite (Python ${{ matrix.python }}, Django ${{ matrix.django }})

	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python }}

	- name: Install dependencies
	run: pip install tox tox-gh-actions

	- name: Run tests
	run: tox
	env:
	PYTHON_VERSION: ${{ matrix.python }}
	DJANGO: ${{ matrix.django }}

	- name: Publish coverage report
	uses: codecov/codecov-action@v3

	publish:
	name: Publish package to PyPI
	runs-on: ubuntu-latest
	needs: tests

	if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')

	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v5
	with:
	python-version: '3.11'

	- name: Build sdist and wheel
	run: \|
	pip install build --upgrade
	python -m build

	# TODO: switch to verified publishers
	- name: Publish a Python distribution to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	user: __token__
	password: ${{ secrets.PYPI_TOKEN }}

Provide feedback