.gitlab-ci.yml

stages:
  - devenv
  - build
  - test
  - lint
  - style
  - coverage
  - release

workflow:
  rules:
    - if: $CI_PIPELINE_SOURCE == "push"

variables:
  GIT_DEPTH: 0

.nix:
  image: registry.gitlab.com/cynerd/gitlab-ci-nix
  tags:
    - docker
  cache:
    key: "nix"
    paths:
      - ".nix-cache"
  before_script:
    - gitlab-ci-nix-cache-before
  after_script:
    - gitlab-ci-nix-cache-after

## Development environment #####################################################
devenv:
  stage: devenv
  extends: .nix
  script:
    - nix develop -c true

## Build stage #################################################################
.build:
  stage: build
  extends: .nix
  needs: ["devenv"]

.musl:
  variables:
    NIXATTR: .#musl

build:
  extends: .build
  script:
    - nix develop --quiet $NIXATTR -c meson setup build -Doptimization=plain $SETUP_ARGS
    - nix develop --quiet $NIXATTR -c meson compile -C build
  artifacts:
    expire_in: 1 week
    paths:
    - 'build/'

build:musl:
  extends: ["build", ".musl"]

build-werror:
  extends: build
  needs:
    - job: build
      artifacts: false
  allow_failure: true
  variables:
    SETUP_ARGS: --werror

build-werror:musl:
  extends: ["build-werror", ".musl"]
  needs:
    - job: build:musl
      artifacts: false

nix:
  stage: build
  extends: .nix
  script:
    - nix build $NIXATTR

nix:musl:
  extends: ["nix", ".musl"]

## Test stage ##################################################################
.test:
  stage: test
  extends: .nix
  needs: ["devenv"]

tests:
  extends: .test
  needs: ["build"]
  script:
    - ulimit -n 1024 # workaround for Valgrind
    - nix develop --quiet $NIXATTR -c meson setup build -Doptimization=plain -Db_coverage=true
    - nix develop --quiet $NIXATTR -c meson test -C build
  artifacts:
    expire_in: 1 week
    paths:
      - 'build/'
    reports:
      junit: 'build/meson-logs/testlog.junit.xml'

tests:musl:
  extends: ["tests", ".musl"]
  needs: ["build:musl"]
  allow_failure: true

valgrind:memcheck:
  extends: tests
  variables:
    VALGRIND: memcheck

valgrind:helgrind:
  extends: tests
  variables:
    VALGRIND: helgrind

valgrind:drd:
  extends: tests
  variables:
    VALGRIND: drd

nix-check:
  extends: .test
  needs:
    - job: nix
      artifacts: false
  script:
    - nix flake check

include:
  - template: Security/Secret-Detection.gitlab-ci.yml

## Lint stage ##################################################################
.linter:
  stage: lint
  extends: .nix
  needs: ["devenv"]
  allow_failure: true

.mesonlinter:
  extends: .linter
  script:
    - nix develop --quiet -c meson setup build -Doptimization=plain
    - nix develop --quiet -c meson compile -C build $COMPILE_ARG

cppcheck:
  extends: .mesonlinter
  variables:
    COMPILE_ARG: ./cppcheck

flawfinder:
  extends: .mesonlinter
  variables:
    COMPILE_ARG: ./flawfinder

shellcheck:
  extends: .linter
  script:
    - git ls-files '**.sh' | xargs nix develop --quiet -c shellcheck

statix:
  extends: .linter
  script:
    - nix develop --quiet -c statix check .

## Code Style stage ############################################################
.style:
  stage: style
  extends: .nix
  needs: ["devenv"]
  allow_failure: true

muon:
  extends: .style
  script:
    - git ls-files '**/meson.build' meson_options.txt | nix develop --quiet -c xargs -n 1 muon fmt -c .muon_fmt.ini -i
    - git diff --exit-code

clang-format:
  extends: .style
  script:
    - git ls-files '**.[ch]' | xargs nix develop --quiet -c clang-format -i
    - git diff --exit-code

shell-format:
  extends: .style
  script:
    - git ls-files '**.sh' '**.bats' | xargs nix develop --quiet -c shfmt -w
    - git diff --exit-code

nixfmt:
  extends: .style
  script:
    - nix fmt
    - git diff --exit-code

deadnix:
  extends: .style
  script:
    - nix develop --quiet -c deadnix --fail .

editorconfig-checker:
  extends: .style
  script:
    - nix develop --quiet -c editorconfig-checker -exclude '.nix-cache/.*'

gitlint:
  extends: .style
  script:
    - git fetch
    - nix develop --quiet -c gitlint --commits origin/master..$CI_COMMIT_SHA

## Code Coverage stage #########################################################
coverage:
  stage: coverage
  extends: .nix
  needs:
    - job: tests
      artifacts: true
  script:
    - nix develop --quiet -c ninja -j1 -C build coverage-html coverage-xml
    - mv build/meson-logs/coveragereport ./
  coverage: '/lines\.\.\.\.\.\.: (\d+.\d+%)/'
  artifacts:
    expire_in: 1 month
    expose_as: 'Code Coverage'
    paths:
    - 'coveragereport/'
    reports:
      coverage_report:
        coverage_format: cobertura
        path: 'build/meson-logs/coverage.xml'

## Release creation ############################################################
release:
  stage: release
  rules:
    - if: '$CI_COMMIT_TAG'
  image: "registry.gitlab.com/gitlab-org/release-cli:latest"
  needs:
    - job: tests
      artifacts: false
  before_script:
    - apk update
    - apk add bash py3-semver
  script:
    - ./.release.sh