.gitlab-ci.yml

image: registry.gitlab.com/kaitaistructcompile.py/kaitai_struct_python_docker:latest

stages:
  - dependencies
  - build
  - test
  - tooling

build:
  tags:
    - shared
  stage: build
  variables:
    GIT_DEPTH: "1"
    PYTHONUSERBASE: "${CI_PROJECT_DIR}/python_user_packages"

  before_script:
    - export PATH="$PATH:$PYTHONUSERBASE/bin" # don't move into `variables`
    - pip3 install --user --pre --upgrade msgpack docutils scikit-learn
    - pip3 install --user --upgrade git+https://gitlab.com/KOLANICH/Chassis.py#egg=Chassis
    - pip3 install --user --upgrade git+https://github.com/Lukasa/hyper.git#egg=hyper

  cache:
    paths:
      - "*.sqlite"
      - "$PYTHONUSERBASE"
      - kaitai_struct_formats

  script:
    - python3 setup.py bdist_wheel
    - pip3 install --user --upgrade ./dist/*.whl
    - coverage run --source=RDataParser -m pytest --junitxml=./rspec.xml ./tests/tests.py
    - mkdir wheels
    - mv ./dist/*.whl ./wheels/RDataParser-0.CI-py3-none-any.whl

  artifacts:
    paths:
      - wheels
    reports:
      junit: ./rspec.xml

checks:
  stage: test
  tags:
    - shared
  image: docker:latest
  variables:
    DOCKER_DRIVER: overlay2
  allow_failure: true
  services:
    - docker:dind
  script:
    - docker run --env SAST_CONFIDENCE_LEVEL=5 --volume "$PWD:/code" --volume /var/run/docker.sock:/var/run/docker.sock "registry.gitlab.com/gitlab-org/security-products/sast:latest" /app/bin/run /code
    #- docker run --env SOURCE_CODE="$PWD" --env CODECLIMATE_VERSION="latest" --volume "$PWD":/code --volume /var/run/docker.sock:/var/run/docker.sock "registry.gitlab.com/gitlab-org/security-products/codequality:latest" /code
    #- docker run --env DEP_SCAN_DISABLE_REMOTE_CHECKS="${DEP_SCAN_DISABLE_REMOTE_CHECKS:-false}" --volume "$PWD:/code" --volume /var/run/docker.sock:/var/run/docker.sock "registry.gitlab.com/gitlab-org/security-products/dependency-scanning:latest" /code

  artifacts:
    reports:
      #codequality: gl-code-quality-report.json
      sast: gl-sast-report.json
      #dependency_scanning: gl-dependency-scanning-report.json