fix(ci): ruff not in scanner [dev] deps — Python CI job fails at ruff check step

[walidboulanouar]

Bug

.github/workflows/ci.yml:117–120 runs ruff check . after installing uv pip install --system -e ".[dev]".

However, apps/scanner/pyproject.toml only includes pytest==8.3.4 in the [project.optional-dependencies] dev group. ruff is not declared, so the ruff check . step will fail with command not found or equivalent.

Fix

Add ruff to the scanner's dev optional-dependencies (pinned exact version):

# apps/scanner/pyproject.toml
[project.optional-dependencies]
dev = [
    "pytest==8.3.4",
    "ruff==0.9.10",  # pin to exact version
]

Or add a separate uv pip install ruff==X.Y.Z step in the CI workflow before the ruff step.

Severity

CI/CD bug — Python CI job will always fail at the ruff step; scanner test coverage gap in CI.

[walidboulanouar]

Verified fixed — apps/scanner/pyproject.toml declares ruff==0.9.6 in the dev extras alongside pytest.