86 lines
2.0 KiB
YAML
86 lines
2.0 KiB
YAML
kind: pipeline
|
|
type: docker
|
|
name: default
|
|
|
|
steps:
|
|
- name: restore-cache-with-filesystem
|
|
image: meltwater/drone-cache
|
|
settings:
|
|
backend: "filesystem"
|
|
restore: true
|
|
cache_key: "{{ .Repo.Name }}"
|
|
archive_format: "gzip"
|
|
filesystem_cache_root: "/tmp/cache"
|
|
mount:
|
|
- '.pipcache'
|
|
volumes:
|
|
- name: cache
|
|
path: /tmp/cache
|
|
|
|
- name: static_analysis
|
|
image: "python:3.8"
|
|
commands:
|
|
- pip3 install --cache-dir='./.pipcache' pylint bandit mccabe
|
|
- pip3 install --cache-dir='./.pipcache' -r requirements.txt
|
|
- find . -name "*.py" -exec python3 -m py_compile '{}' \;
|
|
- find . -name "*.py" -exec pylint '{}' + || if [ $? -eq 1 ]; then echo "you fail"; fi
|
|
- find . -name "*.py" -exec python3 -m mccabe --min 3 '{}' + || if [ $? -eq 1 ]; then echo "you fail"; fi
|
|
- bandit -r . + || if [ $? -eq 1 ]; then echo "you fail"; fi
|
|
|
|
- name: code-analysis
|
|
image: aosapps/drone-sonar-plugin
|
|
settings:
|
|
sonar_host:
|
|
from_secret: SONAR_HOST
|
|
sonar_token:
|
|
from_secret: SONAR_CODE
|
|
|
|
- name: rebuild-cache-with-filesystem
|
|
image: meltwater/drone-cache:dev
|
|
pull: true
|
|
settings:
|
|
backend: "filesystem"
|
|
rebuild: true
|
|
cache_key: "{{ .Repo.Name }}"
|
|
archive_format: "gzip"
|
|
filesystem_cache_root: "/tmp/cache"
|
|
mount:
|
|
- '.pipcache'
|
|
volumes:
|
|
- name: cache
|
|
path: /tmp/cache
|
|
|
|
- name: kaniko
|
|
image: banzaicloud/drone-kaniko
|
|
settings:
|
|
registry: registry.kmlabz.com
|
|
repo: birbnetes/${DRONE_REPO_NAME}
|
|
username:
|
|
from_secret: DOCKER_USERNAME
|
|
password:
|
|
from_secret: DOCKER_PASSWORD
|
|
tags:
|
|
- latest
|
|
- ${DRONE_BUILD_NUMBER}
|
|
|
|
- name: sentry
|
|
image: tormachris/drone-sentry
|
|
settings:
|
|
sentry_project: ${DRONE_REPO_NAME}
|
|
sentry_domain: sentry.kmlabz.com
|
|
sentry_token:
|
|
from_secret: SENTRY_TOKEN
|
|
|
|
- name: ms-teams
|
|
image: kuperiu/drone-teams
|
|
settings:
|
|
webhook:
|
|
from_secret: TEAMS_WEBHOOK
|
|
when:
|
|
status: [ failure ]
|
|
|
|
volumes:
|
|
- name: cache
|
|
host:
|
|
path: "/tmp/cache"
|