117 lines
3.4 KiB
YAML
117 lines
3.4 KiB
YAML
variables:
|
|
JOB_ROOT_DIR: '.'
|
|
SECURE_LOG_LEVEL: debug
|
|
GIT_SUBMODULE_STRATEGY: recursive
|
|
MY_PROJECT_ID: "28543717"
|
|
LICENSE_FINDER_CLI_OPTS: '--recursive'
|
|
|
|
stages:
|
|
- validation
|
|
- test
|
|
- release
|
|
- sync
|
|
|
|
include:
|
|
- local: $JOB_ROOT_DIR/yaml_lint/.gitlab-ci.yml
|
|
- local: $JOB_ROOT_DIR/conventional_commits/.gitlab-ci.yml
|
|
- local: $JOB_ROOT_DIR/git_push_mirror/.gitlab-ci.yml
|
|
- local: $JOB_ROOT_DIR/gitlab_release/.gitlab-ci.yml
|
|
- local: $JOB_ROOT_DIR/python/.gitlab-ci.yml
|
|
- template: Security/Dependency-Scanning.gitlab-ci.yml
|
|
- template: Security/License-Scanning.gitlab-ci.yml
|
|
|
|
# Scanner doesn't Pickup multiple pip files. Disable and specify jobs with pip file.
|
|
gemnasium-python-dependency_scanning:
|
|
rules:
|
|
- when: never
|
|
|
|
# source: https://gitlab.com/gitlab-org/gitlab/-/blob/2f33a8cb4dcea7b875e360d4cd9e016e027d2973/lib/gitlab/ci/templates/Security/Dependency-Scanning.gitlab-ci.yml
|
|
.gemnasium-python-dependency_scanning:
|
|
extends: .ds-analyzer
|
|
image:
|
|
name: "$DS_ANALYZER_IMAGE"
|
|
variables:
|
|
DS_PYTHON_VERSION: "3.6"
|
|
# DS_ANALYZER_IMAGE is an undocumented variable used internally to allow QA to
|
|
# override the analyzer image with a custom value. This may be subject to change or
|
|
# breakage across GitLab releases.
|
|
DS_ANALYZER_IMAGE: "$SECURE_ANALYZERS_PREFIX/gemnasium-python:$DS_MAJOR_VERSION"
|
|
# Stop reporting Pipenv and Setuptools as "pip".
|
|
# See https://gitlab.com/gitlab-org/gitlab/-/issues/338252
|
|
DS_REPORT_PACKAGE_MANAGER_PIP_WHEN_PYTHON: "false"
|
|
# Can't find pillow 9.0, check python version
|
|
before_script:
|
|
- python --version
|
|
rules:
|
|
- if: $DEPENDENCY_SCANNING_DISABLED
|
|
when: never
|
|
# Support passing of $PIP_REQUIREMENTS_FILE
|
|
# See https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#configuring-specific-analyzers-used-by-dependency-scanning
|
|
- if: $CI_COMMIT_BRANCH &&
|
|
$GITLAB_FEATURES =~ /\bdependency_scanning\b/ &&
|
|
$DS_DEFAULT_ANALYZERS =~ /gemnasium-python/ &&
|
|
$PIP_REQUIREMENTS_FILE
|
|
|
|
Ansible Dependencies:
|
|
extends: .gemnasium-python-dependency_scanning
|
|
variables:
|
|
PIP_REQUIREMENTS_FILE: ansible/requirements.txt
|
|
|
|
|
|
conventional_commits Dependencies:
|
|
extends: .gemnasium-python-dependency_scanning
|
|
variables:
|
|
PIP_REQUIREMENTS_FILE: "conventional_commits/requirements.txt"
|
|
|
|
|
|
gitlab_release Dependencies:
|
|
extends: .gemnasium-python-dependency_scanning
|
|
variables:
|
|
PIP_REQUIREMENTS_FILE: ./gitlab_release/requirements.txt
|
|
|
|
|
|
mkdocs Dependencies:
|
|
extends: .gemnasium-python-dependency_scanning
|
|
variables:
|
|
PIP_REQUIREMENTS_FILE: "./mkdocs/requirements.txt"
|
|
|
|
|
|
python Dependencies:
|
|
extends: .gemnasium-python-dependency_scanning
|
|
variables:
|
|
PIP_REQUIREMENTS_FILE: python/requirements.txt
|
|
|
|
|
|
yaml_lint Dependencies:
|
|
extends: .gemnasium-python-dependency_scanning
|
|
variables:
|
|
PIP_REQUIREMENTS_FILE: yaml_lint/requirements.txt
|
|
|
|
|
|
PyLint:
|
|
extends:
|
|
- .PyLint
|
|
image: python:3.6-slim
|
|
|
|
|
|
gilab-ci.yml Lint (python 3.6):
|
|
variables:
|
|
YAML_LINT_PATH: "/*/.gitlab-ci.yml"
|
|
extends:
|
|
- .yaml_lint_defaults
|
|
image: python:3.6-slim
|
|
|
|
|
|
Gitlab Release:
|
|
variables:
|
|
MY_COMMAND: ./sub-folder_changlog.sh
|
|
extends:
|
|
- .gitlab_release
|
|
|
|
|
|
Github (Push --mirror):
|
|
variables:
|
|
GIT_SYNC_URL: "https://$GITHUB_USERNAME_ROBOT:$GITHUB_TOKEN_ROBOT@github.com/NoFussComputing/gitlab-ci.git"
|
|
extends:
|
|
- .git_push_mirror
|