.gitlab-ci.yml

workflow:
  rules:
    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
    - if: $CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS
      when: never
    - if: $CI_COMMIT_BRANCH

include:
  - template: Jobs/Dependency-Scanning.latest.gitlab-ci.yml
  - template: Jobs/License-Scanning.latest.gitlab-ci.yml
  - template: Jobs/SAST.latest.gitlab-ci.yml
  - template: Jobs/Secret-Detection.latest.gitlab-ci.yml

stages:
  - build
  - test
  - publish

build:
  image: node:16
  stage: build
  script:
    - npm install
    - npm run build
    - npm pack
  artifacts:
    untracked: false
    when: on_success
    expire_in: 30 days
    paths:
      - peerplaysjs-lib-*.tgz

deploy:
  image: node:16
  stage: publish
  script:
    - echo "//registry.npmjs.org/:_authToken='$NPM_TOKEN'" > .npmrc
    - npm publish $(ls | grep peerplaysjs-lib-*.tgz) 
  rules:
    - if: $CI_COMMIT_BRANCH == "master" 
  when: manual
  dependencies: [build]

variables:
  SONAR_USER_HOME: "${CI_PROJECT_DIR}/.sonar"  # Defines the location of the analysis task cache
  GIT_DEPTH: "0"  # Tells git to fetch all the branches of the project, required by the analysis task
sonarcloud-check:
  image:
    name: sonarsource/sonar-scanner-cli:latest
    entrypoint: [""]
  cache:
    key: "${CI_JOB_NAME}"
    paths:
      - .sonar/cache
  script:
    - sonar-scanner
  only:
    - branches
    - merge_requests