.gitlab-ci.yml

# SPDX-FileCopyrightText: 2024 hobyte
#
# SPDX-License-Identifier: EPL-2.0

# included templates
include:
  # Node.js template
  - project: "to-be-continuous/node"
    ref: "3.12"
    file: "templates/gitlab-ci-node.yml"
  # Gitleaks template
  - project: "to-be-continuous/gitleaks"
    ref: "2.5"
    file: "templates/gitlab-ci-gitleaks.yml"
  # Renovate template
  - project: "to-be-continuous/renovate"
    ref: "1.2"
    file: "templates/gitlab-ci-renovate.yml"
  #GitLab Static Application Security Testing
  - template: Jobs/SAST.gitlab-ci.yml
  #Gitlab secret detection
  - template: Jobs/Secret-Detection.gitlab-ci.yml

# secret variables
# (define the variables below in your GitLab group/project variables)
# RENOVATE_TOKEN: A GitLab access token to allow Renovate crawl your projects. [See doc](https://docs.renovatebot.com/modules/platform/gitlab/#authentication)
# GITHUB_COM_TOKEN: A GitHub access token to allow Renovate fetch changelogs. [See doc](https://docs.renovatebot.com/getting-started/running/#githubcom-token-for-changelogs)

# your pipeline stages
stages:
  - build
  - test
  - package-build
  - package-test
  - infra
  - deploy
  - acceptance
  - publish
  - infra-prod
  - production

# enable code lint
variables:
  NODE_LINT_ENABLED: "true"

reuse:
  stage: test
  image:
    name: fsfe/reuse:latest
    entrypoint: [""]
  script:
    - reuse lint