2270124e7710ac905b6dc1e199de1505bc77f60a
[releng.git] / jjb / ci_gate_security / opnfv-ci-gate-security.yml
1 ########################
2 # Job configuration for opnfv-lint
3 ########################
4 - project:
5
6     name: anteaterfw
7
8     project: anteaterfw
9
10     jobs:
11         - 'opnfv-security-audit-verify-{stream}'
12
13     stream:
14         - master:
15             branch: '{stream}'
16             gs-pathname: ''
17             disabled: false
18
19 ########################
20 # job templates
21 ########################
22 - job-template:
23     name: 'opnfv-security-audit-verify-{stream}'
24
25     disabled: '{obj:disabled}'
26
27     parameters:
28         - label:
29             name: SLAVE_LABEL
30             default: 'ericsson-build3'
31             description: 'Slave label on Jenkins'
32         - project-parameter:
33             project: $GERRIT_PROJECT
34             branch: '{branch}'
35         - string:
36             name: GIT_BASE
37             default: https://gerrit.opnfv.org/gerrit/$PROJECT
38             description: "Used for overriding the GIT URL coming from Global Jenkins configuration in case if the stuff is done on none-LF HW."
39
40     scm:
41         - git-scm-gerrit
42
43     triggers:
44         - gerrit:
45             server-name: 'gerrit.opnfv.org'
46             trigger-on:
47                 - patchset-created-event:
48                     exclude-drafts: 'false'
49                     exclude-trivial-rebase: 'false'
50                     exclude-no-code-change: 'false'
51                 - draft-published-event
52                 - comment-added-contains-event:
53                     comment-contains-value: 'recheck'
54                 - comment-added-contains-event:
55                     comment-contains-value: 'reverify'
56             projects:
57               - project-compare-type: 'REG_EXP'
58                 project-pattern: 'sandbox'
59                 branches:
60                   - branch-compare-type: 'ANT'
61                     branch-pattern: '**/{branch}'
62                 file-paths:
63                   - compare-type: ANT
64                     pattern: '**'
65             skip-vote:
66                 successful: true
67                 failed: true
68                 unstable: true
69                 notbuilt: true
70
71     builders:
72         - anteater-security-audit
73         - report-security-audit-result-to-gerrit
74 ########################
75 # builder macros
76 ########################
77 - builder:
78     name: anteater-security-audit
79     builders:
80         - shell:
81             !include-raw: ./anteater-security-audit.sh
82
83 - builder:
84     name: report-security-audit-result-to-gerrit
85     builders:
86         - shell:
87             !include-raw: ./anteater-report-to-gerrit.sh