.gitlab-ci.yml

stages:
  - verify
  - build
  - release
  - publish

services:
  - docker:19.03.12-dind
image: usvc/ci-docker:ea51c3b2
before_script:
  - apk add --no-cache git make

lint:
  stage: verify
  script:
    - make lint
  except: ["tags"]

build:
  stage: build
  cache:
    key: ${CI_JOB_NAME}
    paths:
      - ./images
  artifacts:
    expire_in: 1 week
    paths:
      - ./images
      - ./trivy.json
  except: ["tags"]
  script:
    - make package
    - make export
    - make test
    - make scan

# ref https://gitlab.com/usvc/images/ci/recipes#version-bump-gitlab-configurations
version bump:
  stage: release
  only: ["master"]
  image: usvc/ci:version-bump-gitlab
  script: ["entrypoint"]

publish:
  stage: publish
  dependencies: [build]
  only: ["tags"]
  script:
    - make import
    - docker login ${DOCKER_REGISTRY_URL} -u ${DOCKER_REGISTRY_USER} -p ${DOCKER_REGISTRY_PASSWORD}
    - make publish
  after_script:
    - docker logout