cnc-service/.drone.yml

kind: pipeline
type: docker
name: default

steps:
  - name: restore-cache-with-filesystem
    image: meltwater/drone-cache
    settings:
      backend: "filesystem"
      restore: true
      cache_key: "{{ .Repo.Name }}"
      archive_format: "gzip"
      filesystem_cache_root: "/tmp/cache"
      mount:
        - '.pipcache'
    volumes:
      - name: cache
        path: /tmp/cache

  - name: static_analysis
    image: "python:3.8"
    commands:
      - pip3 install --cache-dir='./.pipcache' pylint bandit mccabe
      - pip3 install --cache-dir='./.pipcache' -r requirements.txt
      - find . -name "*.py" -exec python3 -m py_compile '{}' \;
      - find . -name "*.py" -exec pylint '{}' + || if [ $? -eq 1 ]; then echo "you fail"; fi
      - find . -name "*.py" -exec python3 -m mccabe --min 3 '{}' + || if [ $? -eq 1 ]; then echo "you fail"; fi
      - bandit -r . + || if [ $? -eq 1 ]; then echo "you fail"; fi

  - name: code-analysis
    image: aosapps/drone-sonar-plugin
    settings:
      sonar_host:
        from_secret: SONAR_HOST
      sonar_token:
        from_secret: SONAR_CODE

  - name: rebuild-cache-with-filesystem
    image: meltwater/drone-cache:dev
    pull: true
    settings:
      backend: "filesystem"
      rebuild: true
      cache_key: "{{ .Repo.Name }}"
      archive_format: "gzip"
      filesystem_cache_root: "/tmp/cache"
      mount:
        - '.pipcache'
    volumes:
      - name: cache
        path: /tmp/cache

  - name: sentry
    image: tormachris/drone-sentry
    settings:
      sentry_project: ${DRONE_REPO_NAME}
      sentry_domain: sentry.kmlabz.com
      sentry_token:
        from_secret: SENTRY_TOKEN

  - name: kaniko
    image: banzaicloud/drone-kaniko
    settings:
      registry: registry.kmlabz.com
      repo: birbnetes/${DRONE_REPO_NAME}
      username:
        from_secret: DOCKER_USERNAME
      password:
        from_secret: DOCKER_PASSWORD
      tags:
        - latest
        - ${DRONE_BUILD_NUMBER}

  - name: ms-teams
    image: kuperiu/drone-teams
    settings:
      webhook:
        from_secret: TEAMS_WEBHOOK
    when:
      status: [ failure ]

volumes:
  - name: cache
    host:
      path: "/tmp/cache"