.gitlab-ci.yml

stages:
  - test
  - build
  - scan
  - sign

workflow:
  rules:
    - if: $CI_PIPELINE_SOURCE == 'merge_request_event'
    - if: $CI_COMMIT_TAG
    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH

include:
  - project: doca/gitlab-ci-lib
    file: container/build.yaml
  - project: doca/gitlab-ci-lib
    file: container/sign.yaml
  - project: doca/gitlab-ci-lib
    file: container/test.yaml

lint-dockerfile-code-server:
  extends: .tpl:container:test:hadolint
  variables:
    DOCKERFILE_PATH: code-server/Dockerfile

lint-dockerfile-nginx:
  extends: .tpl:container:test:hadolint
  variables:
    DOCKERFILE_PATH: nginx/Dockerfile

lint-dockerfile-oauth:
  extends: .tpl:container:test:hadolint
  variables:
    DOCKERFILE_PATH: oauth/Dockerfile

docker-build-code-server:
  extends: .tpl:container:build:kaniko
  variables:
    IMAGE_NAME: "code-server"
    IMAGE_PATH: "code-server"

docker-build-nginx:
  extends: .tpl:container:build:kaniko
  variables:
    IMAGE_NAME: "nginx"
    IMAGE_PATH: "nginx"

docker-build-oauth:
  extends: .tpl:container:build:kaniko
  variables:
    IMAGE_NAME: "oauth"
    IMAGE_PATH: "oauth"

container_scanning-code-server:
  extends: .tpl:container:test:cve
  variables:
    IMAGE_NAME: "code-server"
  needs:
    - docker-build-code-server

container_scanning-nginx:
  extends: .tpl:container:test:cve
  variables:
    IMAGE_NAME: "nginx"
  needs:
    - docker-build-nginx

container_scanning-oauth:
  extends: .tpl:container:test:cve
  variables: