.gitlab-ci.yml

##
image: docker:dind

variables:
  PACKAGE_NAME: apic-agents-sdk
  GIT_REPO_PATH: src/github.com/Axway # overridden from variables.yml
  GIT_REPO_NAME: agent-sdk
  DEPENDENCY_CHECK_FLAGS: "--scan=**/* --exclude=**/*.zip --suppression=dc-suppressions.xml" # overridden from variables.yml

  # for agent trigger jobs
  AWS_DISCOVERY_PROJECT_ID: 7397
  V7_DISCOVERY_PROJECT_ID: 7540
  AZURE_DISCOVERY_PROJECT_ID: 8585

  # Fortify
  FORTIFY_PROJECT: "10566"
  FORTIFY_BUILD_ID: "apic_agents_sdk"

  # Whitesource
  WS_PROJECT_ID: "APIC_Agents_SDK"

  # just to be sure we don't do vendoring
  GOFLAGS: "-mod=mod"

############################################################
# Section for external includes
############################################################
include:
  - project: "apigov/beano_cicd"
    ref: master
    # the order of these include files is important
    file:
      - "/gitlabci/variables.yml"
      - "/gitlabci/restrictions.yml"
      - "/gitlabci/jobs.yml"
  - project: "scurity/gitlabci"
    ref: master
    file:
      - "/.gitlab-ci-prepcsr.yml"
      - "/.gitlab-ci-fortify.yml"
      - "/.gitlab-ci-whitesource.yml"
      - "/.gitlab-ci-csr.yml"

stages:
  - test
  - sonar
  - security-scans
  - security-review
  - release
  - update-dep

############################################################
# Section for restrictions. This is different than from
# restrictions.yml because the branch is "main", not "master"
############################################################
.only-main: &only-main
  only:
    - main
  except:
    - web
    - triggers

############################################################
# Section for CSR jobs
############################################################
run-csr:
  dependencies:
    - fetch-fortify
    - whitesource

update-csr:
  dependencies:
    - fetch-fortify
    - whitesource:on-schedule

############################################################
# Section for triggering agent updates
############################################################
.trigger-downstream-agent:
  stage: update-dep
  when: manual
  script:
    - apk update && apk add curl ca-certificates
    - echo "triggering downstream agent with SDK_SHA = ${CI_COMMIT_SHA}"
    - curl --request POST --form "token=${CI_JOB_TOKEN}" --form "variables[SDK_SHA]=${CI_COMMIT_SHA}" --form ref=master ${CURL_URL_FOR_TRIGGER}/${PROJECT_ID}/trigger/pipeline
  <<: *only-main

trigger-aws-apigw-discovery-agent:
  before_script:
    - export PROJECT_ID=${AWS_DISCOVERY_PROJECT_ID}
  extends: .trigger-downstream-agent

trigger-v7-discovery-agent:
  before_script:
    - export PROJECT_ID=${V7_DISCOVERY_PROJECT_ID}
  extends: .trigger-downstream-agent

trigger-azure-discovery-agent:
  before_script:
    - export PROJECT_ID=${AZURE_DISCOVERY_PROJECT_ID}
  extends: .trigger-downstream-agent