Jenkinsfile

#! /usr/bin/env groovy

pipeline {
  agent { label 'docker' }

  environment {
    COMPOSE_PROJECT_NAME = "${env.JOB_NAME}-${env.BUILD_ID}".replaceAll("/", "-").replaceAll(" ", "").toLowerCase()
    COMPOSE_FILE = "docker-compose.yml:docker-compose.test.yml"
    RAILS_ENV = "test"
    DOCKER_REF = "${(env.GERRIT_EVENT_TYPE == 'change-merged') ? env.GERRIT_BRANCH : env.GERRIT_REFSPEC}"
    DOCKER_TAG = env.DOCKER_REF.replace("refs/changes/", "").replaceAll("/", ".")
    DEV_BUILD = "true"
  }

  stages {
    stage('Build') {
      steps {
        sh 'docker compose build --pull'
        sh 'docker compose up -d db'
      }
    }

    stage('Prepare') {
      steps {
        sh 'docker compose run --rm web bundle exec rake db:migrate:reset'
      }
    }
    stage('Test') {
      stages {
        stage('RSpec') {
          steps {
            sh 'docker compose run --name=$COMPOSE_PROJECT_NAME-rspec -e ENABLE_COVERAGE=true web bundle exec rake spec'
          }
          post {
            always {
              script {
                // Build-specific coverage
                sh 'docker cp $COMPOSE_PROJECT_NAME-rspec:/usr/src/app/coverage coverage'
                archiveArtifacts 'coverage/**'

                publishHTML target: [
                        allowMissing         : false,
                        alwaysLinkToLastBuild: false,
                        keepAll              : true,
                        reportDir            : 'coverage',
                        reportFiles          : 'index.html',
                        reportName           : 'API Coverage Report'
                ]
                // publish coverage to code-coverage.inseng.net/rollcall/coverage
                uploadCoverage([
                        uploadSource: '/coverage',
                        uploadDest  : 'rollcall/coverage'
                ])

              }
            }
          }
        }
        stage('Test coverage') {
          steps {
            sh 'docker stop $COMPOSE_PROJECT_NAME-rspec'
          }
        }
        stage('Jasmine') {
          steps {
            sh 'docker compose run --rm -T --name=$COMPOSE_PROJECT_NAME-jasmine web bundle exec rake spec:javascript'
          }
        }
        stage('Brakeman') {
          steps {
            sh 'docker compose run --rm -T --name=$COMPOSE_PROJECT_NAME-brakeman web bundle exec brakeman'
          }
        }
        stage('Cucumber') {
          steps {
            sh 'docker compose run --rm -T --name=$COMPOSE_PROJECT_NAME-cucumber web bash bin/cucumber'
          }
        }
        stage('Synk') {
          when { environment name: "GERRIT_EVENT_TYPE", value: "change-merged"}
          steps {
            withCredentials([string(credentialsId: 'SNYK_TOKEN', variable: 'SNYK_TOKEN')]) {
              sh 'docker pull snyk/snyk-cli:rubygems'
              sh 'docker run --rm -v "$(pwd):/project" -e SNYK_TOKEN snyk/snyk-cli:rubygems monitor --project-name=rollcall-attendance:ruby'
            }
          }
        }
        stage('Docker Image') {
          steps {
            sh 'docker build -t $DOCKER_REGISTRY_FQDN/jenkins/rollcall:$DOCKER_TAG .'
            sh 'docker push $DOCKER_REGISTRY_FQDN/jenkins/rollcall:$DOCKER_TAG'
          }
        }
      }
    }
  }

  post {
    cleanup {
      sh 'docker compose down -v --remove-orphans --rmi all'
    }
  }
}