.drone.yml

kind: pipeline
type: docker
name: ci

platform:
  os: linux
  arch: amd64

common_cache_settings: &common_cache_settings
  bucket: dvla-drone1-cache-714782054810
  region: eu-west-2
  encryption: AES256
  endpoint: https://s3.eu-west-2.amazonaws.com

restore_cache: &restore_cache
  restore: true

rebuild_cache: &rebuild_cache
  rebuild: true

npm_cache_settings: &npm_cache_settings
  cache_key: '{{ checksum "package-lock.json" }}'
  mount:
    - 'node_modules'

steps:
  - name: secret scan
    pull: if-not-exists
    image: ecr.tooling.dvla.gov.uk/utilities-ci-tools/ci-secret-scan

  - name: pull npm cache
    image: ecr.tooling.dvla.gov.uk/ce/drone-cache
    depends_on: ["secret scan"]
    settings:
      <<: [*common_cache_settings, *npm_cache_settings, *restore_cache]

  - name: install
    pull: if-not-exists
    image: &base--image ecr.tooling.dvla.gov.uk/base-images/serverless:20.0.0-npm10
    environment:
      NPM_CONFIG_REGISTRY: https://npm.tooling.dvla.gov.uk/npm/npm-group/
    commands:
      - node -v
      - npm ci

  - name: push npm cache
    image: ecr.tooling.dvla.gov.uk/ce/drone-cache
    depends_on: ['install']
    settings:
      <<: [*common_cache_settings, *npm_cache_settings, *rebuild_cache]

  - name: audit
    pull: if-not-exists
    image: *base--image
    failure: ignore
    commands:
      - npm run audit
    depends_on:
      - install

  - name: build
    pull: if-not-exists
    image: *base--image
    commands:
      - npm run build
    depends_on:
      - install

  - name: lint
    pull: if-not-exists
    image: *base--image
    commands:
      - npm run lint --workspaces
    depends_on:
      - build

  - name: outdated
    pull: if-not-exists
    image: *base--image
    failure: ignore
    commands:
     - npm run outdatedRoot
     - npm run outdated
    depends_on:
     - install

  - name: test
    pull: if-not-exists
    image: *base--image
    commands:
      - npm run test
    depends_on:
      - build

  - name: Cloudformation Analysis
    pull: if-not-exists
    image: ecr.tooling.dvla.gov.uk/utilities-ci-tools/ci-verify-cloudformation
    failure: ignore
    depends_on:
      - test
    settings:
      template_dir: ./packages/lab-common-cdk/coverage/templates

  - name: sonar scan
    depends_on: ['Cloudformation Analysis', 'test']
    image: 448934085854.dkr.ecr.eu-west-2.amazonaws.com/utilities-ci-tools/ci-drone-sonar-scanner

  - name: publish
    image: *base--image
    environment: &env-npm-dvla
      NPM_CONFIG_REGISTRY: https://npm.tooling.dvla.gov.uk/npm/npm-group
    commands:
      - aws codeartifact login --tool npm --repository npm-private --domain tooling --domain-owner 448934085854 --region eu-west-2
      - npm run release
      - npm run publish
    depends_on:
      - test
    when:
      branch: [main]

  - name: teams notify success
    image: ecr.tooling.dvla.gov.uk/utilities-ci-tools/ci-notifier:latest
    settings:
      webhook:
        from_secret: TEAMS_WEBHOOK # pragma: allowlist secret
    depends_on: ['publish']
    when:
      branch: [main]
      status:
        - success

  - name: teams notify failure
    image: ecr.tooling.dvla.gov.uk/utilities-ci-tools/ci-notifier:latest
    settings:
      webhook:
        from_secret: TEAMS_WEBHOOK # pragma: allowlist secret
    depends_on: ['test']
    when:
      status:
        - failure