DevOpsExamples/.gitlab-ci.yml at main · RusselSand/DevOpsExamples · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
build-backend-code-job:
  stage: build
  only:
    changes:
    - backend/*
  script:
    - cd backend
    - mvn package -Dmaven.repo.local=${CI_PROJECT_DIR}/.m2/repository
  artifacts:
    paths:
      - backend/target/sausage-store-0.0.1-SNAPSHOT.jar
      - ${CI_PROJECT_DIR}/.m2/repository
  cache:
    paths:
      - ${CI_PROJECT_DIR}/.m2/repository

telegram-notification-backend:
  stage: notify
  only:
    changes:
    - backend/*
    variables:
    - $CI_COMMIT_MESSAGE =~ /send notification/
  script:
    - 'curl -H \"Content-Type: application/json\" -X POST -d chat_id=${CHAT_ID} -d text="Валерия собрала backend: $CI_PROJECT_URL/-/jobs/artifacts/$CI_COMMIT_SHA/download?job=build-backend-code-job" https://api.telegram.org/bot${TG_BOT_ID}/sendMessage '
  needs:
    - build-backend-code-job

spotbugs-sast:
  stage: test
  variables:
    COMPILE: "false"
    SAST_JAVA_VERSION: 11
    MAVEN_REPO_PATH: ${CI_PROJECT_DIR}/.m2/repository
  needs:
    - build-backend-code-job

sonarqube-backend-sast:
  stage: test
  image: maven:3.8-openjdk-16
  variables:
    MAVEN_REPO_PATH: ${CI_PROJECT_DIR}/.m2/repository
    SONAR_USER_HOME: ${CI_PROJECT_DIR}/.sonar
  cache:
    key: "${CI_JOB_NAME}"
    paths:
      - .sonar/cache
  script:
    - cd backend
    - 'mvn verify sonar:sonar -Dsonar.host.url=${SONARQUBE_URL} -Dsonar.projectKey=${SONAR_PROJECT_KEY_BACK} -Dsonar.login=${SONAR_LOGIN_BACK} -Dsonar.qualitygate.wait=true -Dsonar.projectName=${SONAR_PROJECT_KEY_BACK}'
  needs:
    - build-backend-code-job