.gitlab-ci.yml

.executor-docker: &executor-docker
  tags:
    - docker

.node-image: &node-image
  image: node:10.16.0-alpine@sha256:07897ec27318d8e43cfc6b1762e7a28ed01479ba4927aca0cdff53c1de9ea6fd

.checkmarx-image: &checkmarx-image
  image: $CI_REGISTRY/engineering-practice/checkmarx-cli:latest

.checkmarx-script: &checkmarx-script
  script:
    - checkmarx ${CI_PROJECT_NAME}@${CI_PROJECT_NAMESPACE}#${CI_COMMIT_REF_NAME} Engineering

.install-git: &install-git
  before_script:
    - apk update && apk upgrade && apk add --no-cache git

.dependency-npm: &dependency-npm
  dependencies:
    - npm

.dependency-unit: &dependency-unit
  dependencies:
    - npm
    - unit

.only-branches: &only-branches
  except:
    - master
    - tags
    - triggers

.not-branches: &not-branches
  only:
    - master
    - tags

stages:
  - build
  - compliance-tests
  - security-tests
  - unit-tests
  - quality-tests

npm:
  stage: build
  <<: *executor-docker
  <<: *node-image
  script:
    - HASH="$( md5sum package.json )"
    - CACHE=/tmp/${CI_PROJECT_NAME}_${HASH}.tgz
    - if [ -f "$CACHE" ]; then
        tar -xzf "$CACHE";
      else
        rm -f /tmp/${CI_PROJECT_NAME}_*.tgz &&
        npm install &&
        tar -czf "$CACHE" node_modules;
      fi
  artifacts:
    name: "${CI_PROJECT_NAME}_${CI_JOB_ID}_${CI_COMMIT_SHA}"
    expire_in: 30 mins
    paths:
      - node_modules

commitlint-branch:
  stage: compliance-tests
  <<: *executor-docker
  <<: *node-image
  <<: *install-git
  <<: *dependency-npm
  script:
    - git fetch origin master --quiet
    - git checkout master --quiet
    - git reset --hard origin/master --quiet
    - git checkout - --quiet
    - npm run compliance:commits
  <<: *only-branches

eslint:
  stage: compliance-tests
  <<: *executor-docker
  <<: *node-image
  <<: *dependency-npm
  script:
    - npm run compliance:lint

outdated:
  stage: security-tests
  <<: *executor-docker
  <<: *node-image
  <<: *dependency-npm
  script:
    - npm outdated
  allow_failure: true

audit:
  stage: security-tests
  <<: *executor-docker
  <<: *node-image
  script:
    - npm run security:audit

checkmarx:
  stage: security-tests
  <<: *executor-docker
  <<: *checkmarx-image
  <<: *checkmarx-script
  <<: *not-branches

checkmarx-branch:
  stage: security-tests
  <<: *executor-docker
  <<: *checkmarx-image
  <<: *checkmarx-script
  <<: *only-branches
  when: manual

unit:
  stage: unit-tests
  <<: *executor-docker
  <<: *node-image
  <<: *dependency-npm
  script:
    - npm run tests:unit
  artifacts:
    expire_in: 30 mins
    paths:
      - .coverage/unit/lcov.info
  coverage: /^Lines\s*:\s(\d+(?:.\d+)?%)/

sonar-scanner:
  stage: quality-tests
  <<: *executor-docker
  image: $CI_REGISTRY/engineering-practice/sonar-scanner:latest
  <<: *dependency-unit
  script:
    - sed -i.bak -e "s|^SF:\(.*/[[:digit:]]\{1,\}/.*/\)|SF:$( pwd )/|g" .coverage/unit/lcov.info
    - sonar-scanner
  <<: *not-branches