.gitlab-ci.yml

# You can override the included template(s) by including variable overrides
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
# Note that environment variables can be set in several places
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
services:
- postgres:14.5
variables:
  POSTGRES_USER: phoenix
  POSTGRES_DB: phoenix
  POSTGRES_HOST_AUTH_METHOD: trust
  LICENSE_FINDER_CLI_OPTS: '--recursive'
stages:
- test
- publish
- deploy

sast:
  stage: test
include:
- template: Security/SAST.gitlab-ci.yml
- template: Security/Dependency-Scanning.gitlab-ci.yml
- template: Security/Secret-Detection.gitlab-ci.yml  

migrate-and-test:
  stage: test
  variables:
    DATABASE_URL: postgres://phoenix:phoenix@postgres:5432/phoenix
    H_ORIGIN: http://localhost:5000
  image:
    name: ruby:3.0.6
  script:
  - gem install bundler
  - gem install rails
  - bundle install
  - rails db:migrate
  - rails server -d
  - sleep 20
  - kill $(cat tmp/pids/server.pid)



docker-nightly:
  stage: publish
  needs:
    - migrate-and-test
  image:
    name: gcr.io/kaniko-project/executor:v1.9.0-debug
    entrypoint:
    - ''
  script:
  - /kaniko/executor --context "${CI_PROJECT_DIR}" --dockerfile "${CI_PROJECT_DIR}/Dockerfile"
    --destination "${CI_REGISTRY_IMAGE}:nightly" --build-arg GIT_TAG=nightly
  rules:
  - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH


docker-prod:
  stage: publish
  needs:
    - migrate-and-test
  image:
    name: gcr.io/kaniko-project/executor:v1.9.0-debug
    entrypoint:
    - ''
  script:
  - /kaniko/executor --context "${CI_PROJECT_DIR}" --dockerfile "${CI_PROJECT_DIR}/Dockerfile"
    --destination "${CI_REGISTRY_IMAGE}:${CI_COMMIT_TAG}" --destination "${CI_REGISTRY_IMAGE}:stable" --build-arg GIT_TAG=${CI_COMMIT_TAG}
  rules:
  - if: $CI_COMMIT_TAG
  
deploy-prod:
  stage: deploy
  image:
    name: curlimages/curl
  environment:
    name: production
    url: https://edit.tosdr.org
  needs:
    - docker-prod
  script:
    - curl -X POST $PORTAINER_WEBHOOK_URL_PROD
  rules:
    - if: $CI_COMMIT_TAG
  
  
deploy-staging:
  stage: deploy
  image:
    name: curlimages/curl
  environment:
    name: staging
    url: https://edit.staging.tosdr.org
  needs:
    - docker-nightly
  script:
    - curl -X POST $PORTAINER_WEBHOOK_URL_STAGING
  rules:
  - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH