update build utils security (#24)

* IS-964: Add security pipeline

* IS-964: Add secirity tools to pipeline

* Switch to Erlang service pipe

* Fix tests
This commit is contained in:
Sergey Yelin 2020-07-07 19:40:28 +03:00 committed by GitHub
parent 908c248d28
commit 8c02949fcc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 50 deletions

54
Jenkinsfile vendored
View File

@ -1,4 +1,5 @@
#!groovy
// -*- mode: groovy -*-
def finalHook = {
runStage('store CT logs') {
@ -10,57 +11,12 @@ build('kds', 'docker-host', finalHook) {
checkoutRepo()
loadBuildUtils()
def pipeDefault
def withWsCache
def pipeErlangService
runStage('load pipeline') {
env.JENKINS_LIB = "build_utils/jenkins_lib"
pipeDefault = load("${env.JENKINS_LIB}/pipeDefault.groovy")
withWsCache = load("${env.JENKINS_LIB}/withWsCache.groovy")
env.SH_TOOLS = "build_utils/sh"
pipeErlangService = load("${env.JENKINS_LIB}/pipeErlangService.groovy")
}
pipeDefault() {
if (env.BRANCH_NAME != 'master') {
runStage('compile') {
withGithubPrivkey {
sh 'make wc_compile'
}
}
runStage('lint') {
sh 'make wc_lint'
}
runStage('xref') {
sh 'make wc_xref'
}
runStage('dialyze') {
withWsCache("_build/default/rebar3_22.3.1_plt") {
sh 'make wc_dialyze'
}
}
runStage('test') {
sh "make wc_test"
}
}
runStage('make release') {
withGithubPrivkey {
sh "make wc_release"
}
}
runStage('build image') {
sh "make build_image"
}
try {
if (masterlikeBranch()) {
runStage('push image') {
sh "make push_image"
}
}
} finally {
runStage('rm local image') {
sh 'make rm_local_image'
}
}
}
pipeErlangService.runPipe(false, true)
}

@ -1 +1 @@
Subproject commit 4e6aae0f31885d3c56d09c72de7ef8d432149dbf
Subproject commit 91587cccf7f5dbb2b0ccf4ca3b838b22c8c588a0