config.yml

version: 2.1

orbs:
  codacy: codacy/base@12.0.0
  codacy_plugins_test: codacy/plugins-test@2.0.11

references:
  install_trivy_and_download_dbs: &install_trivy_and_download_dbs
    persist_to_workspace: true
    # https://aquasecurity.github.io/trivy/v0.59/getting-started/installation/#install-script
    cmd: |
      curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b . v0.59.1
      mkdir cache
      ./trivy --cache-dir ./cache image --download-db-only

  build_and_publish_docker: &build_and_publish_docker
    persist_to_workspace: true
    cmd: |
      docker build -t $CIRCLE_PROJECT_REPONAME:latest --build-arg TRIVY_VERSION=0.59.1 .
      docker save --output docker-image.tar $CIRCLE_PROJECT_REPONAME:latest

workflows:
  compile_test_deploy:
    jobs:
      - codacy/checkout_and_version
      - codacy/shell:
          name: generate_and_test
          cmd: |
            go generate ./...
            go test ./...
          requires:
            - codacy/checkout_and_version
      - codacy/shell:
          <<: *install_trivy_and_download_dbs
          name: install_trivy_and_download_dbs
          requires:
            - generate_and_test
      - codacy/shell:
          <<: *build_and_publish_docker
          name: publish_docker_local
          requires:
            - install_trivy_and_download_dbs
      - codacy_plugins_test/run:
          name: plugins_test
          run_multiple_tests: true
          requires:
            - publish_docker_local
      - codacy/publish_docker:
          context: CodacyDocker
          requires:
            - plugins_test
          filters:
            branches:
              only:
                - master
      - codacy/tag_version:
          name: tag_version
          context: CodacyAWS
          requires:
            - codacy/publish_docker

  update_vulnerability_dbs:
    triggers:
      - schedule:
          # this is running at 3am everyday to avoid doing it at midnight (same time as nightly)
          cron: "0 3 * * *"
          filters:
            branches:
              only:
                - master
    jobs:
      - codacy/checkout_and_version
      - codacy/shell:
          name: generate_and_test
          cmd: |
            go generate ./...
            go test ./...
          requires:
            - codacy/checkout_and_version
      - codacy/shell:
          <<: *install_trivy_and_download_dbs
          name: install_trivy_and_download_dbs
          requires:
            - generate_and_test
      - codacy/shell:
          <<: *build_and_publish_docker
          name: publish_docker_local
          requires:
            - install_trivy_and_download_dbs
      - codacy_plugins_test/run:
          name: plugins_test
          run_multiple_tests: true
          requires:
            - publish_docker_local
      - codacy/publish_docker:
          name: publish_dockerhub
          context: CodacyDocker
          cmd: |
            docker load --input docker-image.tar
            echo "$DOCKER_PASS" | docker login -u "$DOCKER_USER" --password-stdin
            docker tag "$CIRCLE_PROJECT_REPONAME:latest" "codacy/$CIRCLE_PROJECT_REPONAME:$(cat .previous_version)"
            docker tag "$CIRCLE_PROJECT_REPONAME:latest" "codacy/$CIRCLE_PROJECT_REPONAME:latest"
            docker push --all-tags "codacy/$CIRCLE_PROJECT_REPONAME"
          requires:
            - plugins_test
      - codacy/mirror_to_ecr:
          context: CodacyAWS
          name: mirror_to_ecr_integration
          aws_profile: integration
          source_name: codacy/codacy-trivy
          mirror_name: codacy/codacy-trivy
          source_tag: $(cat .previous_version)
          force: true
          requires:
            - publish_dockerhub
      - codacy/mirror_to_ecr:
          context: CodacyAWS
          name: mirror_to_ecr_staging
          aws_profile: staging
          source_name: codacy/codacy-trivy
          mirror_name: codacy/codacy-trivy
          source_tag: $(cat .previous_version)
          force: true
          requires:
            - publish_dockerhub
      - codacy/mirror_to_ecr:
          context: CodacyAWS
          name: mirror_to_ecr_production
          aws_profile: production
          source_name: codacy/codacy-trivy
          mirror_name: codacy/codacy-trivy
          source_tag: $(cat .previous_version)
          force: true
          requires:
            - publish_dockerhub