Fixed chaining of correlation rules #818

	name: Test
	on:
	push:
	branches: ["*"]
	pull_request:
	branches: ["*"]
	workflow_dispatch:

	jobs:
	test:
	strategy:
	matrix:
	os: ["ubuntu-24.04", "windows-2022", "macos-14"]
	python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
	runs-on: ${{ matrix.os }}
	steps:
	- uses: actions/checkout@v4
	- name: Install Poetry
	run: pipx install poetry
	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}
	cache: poetry
	- name: Install dependencies
	run: poetry install
	- name: Lint with black
	run: poetry run black --check .
	- name: Run tests
	run: poetry run pytest --cov=sigma --cov-report term --cov-report xml:cov.xml -vv
	- name: Store coverage for badge
	if: ${{ runner.os == 'Linux' }}
	run: poetry run python print-coverage.py >> $GITHUB_ENV
	- name: Create coverage badge
	if: ${{ github.repository == 'SigmaHQ/pySigma' && github.event_name == 'push' && runner.os == 'Linux' }}
	uses: schneegans/[email protected]
	with:
	auth: ${{ secrets.GIST_SECRET }}
	gistID: 11b31b4f709b6dc54a30d5203e8fe0ee
	filename: SigmaHQ-pySigma-coverage.json
	label: Coverage
	message: ${{ env.COVERAGE }}
	color: ${{ env.COVERAGE_COLOR }}

Provide feedback