forked from SonarSource/sonar-scanner-maven
-
Notifications
You must be signed in to change notification settings - Fork 0
/
.cirrus.yml
142 lines (133 loc) · 4.41 KB
/
.cirrus.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
#
# ENV VARIABLES
#
env:
### Shared variables
ARTIFACTORY_URL: VAULT[development/kv/data/repox data.url]
ARTIFACTORY_PRIVATE_USERNAME: vault-${CIRRUS_REPO_OWNER}-${CIRRUS_REPO_NAME}-private-reader
ARTIFACTORY_PRIVATE_PASSWORD: VAULT[development/artifactory/token/SonarSource-sonar-scanner-maven-private-reader access_token]
ARTIFACTORY_ACCESS_TOKEN: VAULT[development/artifactory/token/SonarSource-sonar-scanner-maven-private-reader access_token]
ARTIFACTORY_DEPLOY_USERNAME: vault-${CIRRUS_REPO_OWNER}-${CIRRUS_REPO_NAME}-qa-deployer
ARTIFACTORY_DEPLOY_PASSWORD: VAULT[development/artifactory/token/SonarSource-sonar-scanner-maven-qa-deployer access_token]
ARTIFACTORY_DEPLOY_REPO: sonarsource-public-qa
ARTIFACTORY_PROMOTE_ACCESS_TOKEN: VAULT[development/artifactory/token/${CIRRUS_REPO_OWNER}-${CIRRUS_REPO_NAME}-promoter access_token]
### Project variables
DEPLOY_PULL_REQUEST: true
NIGHTLY_CRON: 'nightly-cron'
#
# RE-USABLE CONFIGS
#
container_definition: &CONTAINER_DEFINITION
image: ${CIRRUS_AWS_ACCOUNT}.dkr.ecr.eu-central-1.amazonaws.com/base:j17-m3.8.8-latest
cluster_name: ${CIRRUS_CLUSTER_NAME}
region: eu-central-1
namespace: default
only_sonarsource_qa: &ONLY_SONARSOURCE_QA
only_if: $CIRRUS_USER_COLLABORATOR == 'true' && ($CIRRUS_PR != "" || $CIRRUS_BRANCH == "master" || $CIRRUS_BRANCH =~ "branch-.*" || $CIRRUS_BRANCH =~ "dogfood-on-.*")
except_nightly_cron: &EXCEPT_ON_NIGHTLY_CRON
only_if: $CIRRUS_CRON != $NIGHTLY_CRON
#
# TASKS
#
build_task:
eks_container:
<<: *CONTAINER_DEFINITION
cpu: 1
memory: 2G
env:
SONAR_TOKEN: VAULT[development/kv/data/next data.token]
SONAR_HOST_URL: https://next.sonarqube.com/sonarqube
SIGN_KEY: VAULT[development/kv/data/sign data.key]
PGP_PASSPHRASE: VAULT[development/kv/data/sign data.passphrase]
maven_cache:
folder: ${CIRRUS_WORKING_DIR}/.m2/repository
script:
- source cirrus-env BUILD
- regular_mvn_build_deploy_analyze
cleanup_before_cache_script:
- cleanup_maven_repository
mend_scan_task:
depends_on:
- build
# run only on master and long-living branches
only_if: $CIRRUS_USER_COLLABORATOR == 'true' && $CIRRUS_TAG == "" && ($CIRRUS_BRANCH == "master" || $CIRRUS_BRANCH =~ "branch-.*" || $CIRRUS_BRANCH =~ "mend-.*")
eks_container:
image: ${CIRRUS_AWS_ACCOUNT}.dkr.ecr.eu-central-1.amazonaws.com/base:j21-latest
region: eu-central-1
cluster_name: ${CIRRUS_CLUSTER_NAME}
namespace: default
cpu: 4
memory: 2G
env:
WS_APIKEY: VAULT[development/kv/data/mend data.apikey]
maven_cache:
folder: ${CIRRUS_WORKING_DIR}/.m2/repository
mend_script:
- source cirrus-env QA
- source set_maven_build_version $BUILD_NUMBER
- mvn clean install -DskipTests
- source ws_scan.sh
cleanup_before_cache_script: cleanup_maven_repository
allow_failures: "true"
always:
ws_scan_artifacts:
path: "whitesource/**/*"
qa_task:
depends_on:
- build
<<: *ONLY_SONARSOURCE_QA
eks_container:
<<: *CONTAINER_DEFINITION
cpu: 2
memory: 4G
env:
matrix:
- SQ_VERSION: DEV
MAVEN_VERSION: 4.0.0-alpha-4
- SQ_VERSION: DEV
MAVEN_VERSION: 3.9.4
- SQ_VERSION: DEV
MAVEN_VERSION: 3.8.8
- SQ_VERSION: DEV
MAVEN_VERSION: 3.6.3
- SQ_VERSION: LATEST_RELEASE
MAVEN_VERSION: 3.9.4
- SQ_VERSION: LATEST_RELEASE
MAVEN_VERSION: 3.8.8
- SQ_VERSION: LATEST_RELEASE
MAVEN_VERSION: 3.6.3
- SQ_VERSION: LATEST_RELEASE[9.9]
MAVEN_VERSION: 3.9.4
- SQ_VERSION: LATEST_RELEASE[9.9]
MAVEN_VERSION: 3.8.8
- SQ_VERSION: LATEST_RELEASE[9.9]
MAVEN_VERSION: 3.6.3
- SQ_VERSION: LATEST_RELEASE[9.9]
MAVEN_VERSION: 3.5.4
- SQ_VERSION: LATEST_RELEASE[9.9]
MAVEN_VERSION: 3.3.9
- SQ_VERSION: LATEST_RELEASE[9.9]
MAVEN_VERSION: 3.2.5
maven_cache:
folder: ${CIRRUS_WORKING_DIR}/.m2/repository
qa_script:
- ./cirrus/cirrus-qa.sh
cleanup_before_cache_script:
- cleanup_maven_repository
promote_task:
depends_on:
- qa
<<: *ONLY_SONARSOURCE_QA
<<: *EXCEPT_ON_NIGHTLY_CRON
eks_container:
<<: *CONTAINER_DEFINITION
cpu: 0.5
memory: 500M
env:
GITHUB_TOKEN: VAULT[development/github/token/SonarSource-sonar-scanner-maven-promotion token]
maven_cache:
folder: $CIRRUS_WORKING_DIR/.m2/repository
script:
- cirrus_promote_maven
cleanup_before_cache_script:
- cleanup_maven_repository