.gitlab-ci.yml

stages:
  - test
  - post-test
  - deploy-testpypi
  - deploy-pypi


# Set defaults
default:
  interruptible: true
  before_script:
    - date
  after_script:
    - date
    - python -V

.common_cache: &common_cache
  cache:
    key: "python3"
    paths:
      - .cache/


# For package caching
variables:
  PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache"
  PIPENV_CACHE_DIR: "$CI_PROJECT_DIR/.cache"

.junit_test_results: &junit_test_results
  artifacts:
    reports:
      junit: .pytest-junit.xml
    expire_in: 4 weeks


# Create the core definition of the test; TOXENV and image defined in each main job.
.core_test_definition: &core_test_definition
  <<: *common_cache
  <<: *junit_test_results
  stage: test
  script:
    # Build out the docker image with what we need to get the tests rolling
    - apk add --update libffi-dev python3 python3-dev make g++ git
    - wget -O - https://bootstrap.pypa.io/get-pip.py | python3
    - pip install pipenv
    # Start the test stuff.
    - make tox


python36:
  <<: *core_test_definition
  image: python:3.6-alpine
  variables:
    TOXENV: "py36"

python37:
  <<: *core_test_definition
  image: python:3.7-alpine
  variables:
    TOXENV: "py37"

python38:
  <<: *core_test_definition
  image: python:3.8-alpine
  variables:
    TOXENV: "py38"

python39:
  <<: *core_test_definition
  image: python:3.9-alpine
  variables:
    TOXENV: "py39"


# Deploy phases
.deploy_common: &deploy_common
  <<: *common_cache
  when: manual
  interruptible: false
  image: python:3.9-alpine
  script:
    - apk add --update libffi-dev python3 python3-dev make g++ git openssl-dev
    # gcc musl-dev python3-dev libffi-dev openssl-dev cargo: for cryptography dependency (rust components; see https://cryptography.io/en/latest/installation.html)
    - apk add --update gcc musl-dev python3-dev libffi-dev openssl-dev cargo
    - wget -O - https://bootstrap.pypa.io/get-pip.py | python3
    - pip install twine pipenv
    - make create-pipenv
    - make build
    - twine upload --skip-existing --disable-progress-bar ./dist/*
  environment:
    name: pypi-pyhibp-deployment
    url: https://example.com

testpypi-deploy:
  <<: *deploy_common
  stage: deploy-testpypi
  variables:
    TWINE_PASSWORD: $TWINE_PASSWORD_PYPITEST_PYHIBP
    TWINE_REPOSITORY_URL: $TWINE_REPOSITORY_URL_PYPITEST

pypi-deploy:
  <<: *deploy_common
  stage: deploy-pypi
  variables:
    TWINE_PASSWORD: $TWINE_PASSWORD_PYPI_PYHIBP
    TWINE_REPOSITORY_URL: $TWINE_REPOSITORY_URL_PYPI


# SAST/Code Quality -- GitLab templates, with overrides for artifacts
include:
  - template: SAST.gitlab-ci.yml
  - template: Code-Quality.gitlab-ci.yml

sast:
  stage: post-test
  artifacts:
    expire_in: 2 weeks

code_quality:
  stage: post-test
  artifacts:
    expire_in: 2 weeks