.gitlab-ci.yml

# You can override the included template(s) by including variable overrides
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
# Note that environment variables can be set in several places
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
default:
  before_script:
  - curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py
    | python
  - export PATH=$PATH:$HOME/.poetry/bin
stages:
- test
- build
- deploy
test-py36:
  stage: test
  image: python:3.6
  script:
  - pip install "tox>3,<4"
  - tox -e py36
test-py37:
  stage: test
  image: python:3.7
  script:
  - pip install "tox>3,<4"
  - tox -e py37
test-py38:
  stage: test
  image: python:3.8
  script:
  - pip install "tox>3,<4"
  - tox -e py38
test-py39:
  stage: test
  image: python:3.9
  script:
  - pip install "tox>3,<4"
  - tox -e py39
build-wheel:
  stage: build
  image: python:3.8
  only:
  - "/^v\\d+\\.\\d+\\.\\d+$/"
  except:
  - branches
  environment:
    name: pypi
  script:
  - poetry build
  - python -m pip install pipx
  - pipx install dist/*.whl
  - "~/.local/bin/bamp -h"
  - echo $?
  artifacts:
    untracked: false
    expire_in: 30 days
    paths:
    - dist/*.whl
build-sdist:
  stage: build
  image: python:3.8
  only:
  - "/^v\\d+\\.\\d+\\.\\d+$/"
  except:
  - branches
  environment:
    name: pypi
  script:
  - poetry build
  - python -m pip install pipx
  - pipx install dist/*.tar.gz
  - "~/.local/bin/bamp -h"
  - echo $?
  artifacts:
    untracked: false
    expire_in: 30 days
    paths:
    - dist/*.tar.gz
publish:
  stage: deploy
  image: python:3.8
  only:
  - "/^v\\d+\\.\\d+\\.\\d+$/"
  except:
  - branches
  environment:
    name: pypi
  script:
  - poetry publish --username "$POETRY_PYPI_USERNAME" --password "$POETRY_PYPI_PASSWORD"
sast:
  stage: test
  before_script:
    - echo
include:
- template: Security/SAST.gitlab-ci.yml