Improve gitlab ci

master
Melroy van den Berg 2022-01-22 19:23:07 +01:00
parent 0ab04c1801
commit 9f7b48c333
No known key found for this signature in database
GPG Key ID: 71D11FF23454B9D7
1 changed files with 37 additions and 14 deletions

View File

@ -1,30 +1,31 @@
image: danger89/gtk3-docker-cmake-ninja:2.5 image: danger89/gtk3-docker-cmake-ninja:2.5
stages: stages:
- build - build
#- upload #- upload
- test
- release - release
variables: variables:
GIT_SUBMODULE_STRATEGY: recursive GIT_SUBMODULE_STRATEGY: recursive
PACKAGE_REGISTRY_URL: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/dweb-browser/${CI_COMMIT_TAG}" PACKAGE_REGISTRY_URL: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/dweb-browser/${CI_COMMIT_TAG}"
RELEASE_LINKS_URL: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/releases/${CI_COMMIT_TAG}/assets/links" RELEASE_LINKS_URL: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/releases/${CI_COMMIT_TAG}/assets/links"
SAST_EXCLUDED_PATHS: "lib"
doxygen: doxygen:
stage: build stage: build
script: script:
- ./scripts/build-docs.sh - ""./scripts/build-docs.sh"
artifacts: artifacts:
name: "Doxygen" name: Doxygen
paths: paths:
- build_docs/docs/html/ - build_docs/docs/html/
linux_build: linux_build:
stage: build stage: build
script: script:
- ./scripts/build-lnx-prod.sh - ""./scripts/build-lnx-prod.sh"
artifacts: artifacts:
name: "Packages" name: Packages
expire_in: 4 weeks expire_in: 4 weeks
paths: paths:
- build_prod/libreweb-browser-*.deb - build_prod/libreweb-browser-*.deb
@ -33,29 +34,51 @@ linux_build:
static_code_analysis: static_code_analysis:
stage: build stage: build
script: ./scripts/cpp-check.sh script: "./scripts/cpp-check.sh"
code_style_guidelines: code_style_guidelines:
stage: build stage: build
script: ./scripts/check-format.sh script: "./scripts/check-format.sh"
# TODO: Testing!
#unit_test: #unit_test:
# stage: test # stage: test
# script : # script :
sast:
stage: test
artifacts:
reports:
sast: gl-sast-report.json
variables:
SEARCH_MAX_DEPTH: 3
include:
- template: Security/SAST.gitlab-ci.yml
- template: Security/Secret-Detection.gitlab-ci.yml
# Upload artifacts & Create new release # Upload artifacts & Create new release
upload_and_release: upload_and_release:
stage: release # upload stage: release # upload
image: curlimages/curl:latest image: curlimages/curl:latest
rules: rules:
- if: '$CI_PROJECT_NAMESPACE == "libreweb" && $CI_COMMIT_TAG' - if: $CI_PROJECT_NAMESPACE == "libreweb" && $CI_COMMIT_TAG
script: script:
- 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file build_prod/libreweb-browser-v${CI_COMMIT_TAG}.deb ${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.deb' - 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file build_prod/libreweb-browser-v${CI_COMMIT_TAG}.deb
- 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file build_prod/libreweb-browser-v${CI_COMMIT_TAG}.rpm ${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.rpm' ${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.deb'
- 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file build_prod/libreweb-browser-v${CI_COMMIT_TAG}.tar.gz ${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.tar.gz' - 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file build_prod/libreweb-browser-v${CI_COMMIT_TAG}.rpm
- 'curl --header "PRIVATE-TOKEN: ${ACCESS_TOKEN}" --header "Content-Type: application/json" --request POST --data "{\"name\":\"LibreWeb Browser (Compressed binary)\",\"url\":\"${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.tar.gz\",\"link_type\":\"package\"}" ${RELEASE_LINKS_URL}' ${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.rpm'
- 'curl --header "PRIVATE-TOKEN: ${ACCESS_TOKEN}" --header "Content-Type: application/json" --request POST --data "{\"name\":\"LibreWeb Browser (Red-Hat/Fedora/openSUSE)\",\"url\":\"${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.rpm\",\"link_type\":\"package\"}" ${RELEASE_LINKS_URL}' - 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file build_prod/libreweb-browser-v${CI_COMMIT_TAG}.tar.gz
- 'curl --header "PRIVATE-TOKEN: ${ACCESS_TOKEN}" --header "Content-Type: application/json" --request POST --data "{\"name\":\"LibreWeb Browser (Debian/Ubuntu/Linux Mint)\",\"url\":\"${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.deb\",\"link_type\":\"package\"}" ${RELEASE_LINKS_URL}' ${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.tar.gz'
- 'curl --header "PRIVATE-TOKEN: ${ACCESS_TOKEN}" --header "Content-Type: application/json"
--request POST --data "{\"name\":\"LibreWeb Browser (Compressed binary)\",\"url\":\"${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.tar.gz\",\"link_type\":\"package\"}"
${RELEASE_LINKS_URL}'
- 'curl --header "PRIVATE-TOKEN: ${ACCESS_TOKEN}" --header "Content-Type: application/json"
--request POST --data "{\"name\":\"LibreWeb Browser (Red-Hat/Fedora/openSUSE)\",\"url\":\"${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.rpm\",\"link_type\":\"package\"}"
${RELEASE_LINKS_URL}'
- 'curl --header "PRIVATE-TOKEN: ${ACCESS_TOKEN}" --header "Content-Type: application/json"
--request POST --data "{\"name\":\"LibreWeb Browser (Debian/Ubuntu/Linux Mint)\",\"url\":\"${PACKAGE_REGISTRY_URL}/libreweb-browser-v${CI_COMMIT_TAG}.deb\",\"link_type\":\"package\"}"
${RELEASE_LINKS_URL}'
# Create new release # Create new release
#release: #release: