.woodpecker.yml

variables:
  - &plugin-kaniko 'ghcr.io/mindthecap/plugin-kaniko@sha256:e9b05649b4975f1adb634ca4089ac16bd6af336a160f9d2e11ecbfda08e3482e'

steps:
  securitycheck:
    group: build
    when:
      - branch: [master, dev]
    image: ghcr.io/mindthecap/trivy-offline:latest
    commands:
      - trivy fs --skip-db-update --exit-code 1 --severity HIGH,CRITICAL .
      - trivy fs --skip-db-update --exit-code 0 --severity MEDIUM .

  go-test-step:
    group: build
    when:
      - path: "src/backend/**"
    image: *plugin-kaniko
    settings:
      dry_run: true
      target: gotest
      cache: "true"

  build:
    when:
      - branch: [master]
    image: *plugin-kaniko
    settings:
      repo: ${CI_REPO}
      auto_tag: "true"
      registry: ${REGISTRY}
      cache: "true"
      username:
        from_secret: <woodpecker_username>
      password:
        from_secret: <woodpecker_secret>
      mirror: ${DOCKERIO_MIRROR}