jjb/ci_gate_security/opnfv-ci-gate-security.yml

   1 ---
   2 # SPDX-license-identifier: Apache-2.0
   3 ########################
   4 # Job configuration for opnfv-anteater (security audit)
   5 ########################
   6 - project:
   7
   8     name: anteaterfw
   9
  10     project: anteaterfw
  11
  12     jobs:
  13       - 'opnfv-security-audit-verify-{stream}'
  14       - 'opnfv-security-audit-weekly-{stream}'
  15
  16     stream:
  17       - master:
  18           branch: '{stream}'
  19           gs-pathname: ''
  20           disabled: false
  21
  22 ########################
  23 # job templates
  24 ########################
  25 - job-template:
  26     name: 'opnfv-security-audit-weekly-{stream}'
  27
  28     disabled: '{obj:disabled}'
  29
  30     parameters:
  31       - label:
  32           name: SLAVE_LABEL
  33           default: 'ericsson-build3'
  34           description: 'Slave label on Jenkins'
  35       - project-parameter:
  36           project: releng
  37           branch: '{branch}'
  38
  39     triggers:
  40       - timed: '@weekly'
  41
  42     builders:
  43       - anteater-security-audit-weekly
  44
  45 - job-template:
  46     name: 'opnfv-security-audit-verify-{stream}'
  47
  48     disabled: '{obj:disabled}'
  49
  50     parameters:
  51       - label:
  52           name: SLAVE_LABEL
  53           default: 'ericsson-build3'
  54           description: 'Slave label on Jenkins'
  55       - project-parameter:
  56           project: $GERRIT_PROJECT
  57           branch: '{branch}'
  58       - string:
  59           name: GIT_BASE
  60           default: https://gerrit.opnfv.org/gerrit/$PROJECT
  61           # yamllint disable rule:line-length
  62           description: "Used for overriding the GIT URL coming from Global Jenkins configuration in case if the stuff is done on none-LF HW."
  63           # yamllint enable rule:line-length
  64
  65     scm:
  66       - git-scm-gerrit
  67
  68     # yamllint disable rule:line-length
  69     triggers:
  70       - gerrit:
  71           server-name: 'gerrit.opnfv.org'
  72           trigger-on:
  73             - patchset-created-event:
  74                 exclude-drafts: 'false'
  75                 exclude-trivial-rebase: 'false'
  76                 exclude-no-code-change: 'false'
  77             - draft-published-event
  78             - comment-added-contains-event:
  79                 comment-contains-value: 'recheck'
  80             - comment-added-contains-event:
  81                 comment-contains-value: 'reverify'
  82           projects:
  83             - project-compare-type: 'REG_EXP'
  84               project-pattern: 'apex|armband|bamboo|barometer|bottlenecks|calipso|compass4nfv|conductor|cooper|cperf|daisy|doctor|dovetail|dpacc|enfv|escalator|fds|fuel|functest|octopus|pharos|releng|sandbox|yardstick'
  85               branches:
  86                 - branch-compare-type: 'ANT'
  87                   branch-pattern: '**/{branch}'
  88               file-paths:
  89                 - compare-type: ANT
  90                   pattern: '**'
  91           skip-vote:
  92             successful: true
  93             failed: true
  94             unstable: true
  95             notbuilt: true
  96     # yamllint enable rule:line-length
  97
  98     builders:
  99       - anteater-security-audit
 100       - report-security-audit-result-to-gerrit
 101     publishers:
 102       - archive-artifacts:
 103           artifacts: ".reports/*"
 104
 105 ########################
 106 # builder macros
 107 ########################
 108 - builder:
 109     name: anteater-security-audit
 110     builders:
 111       - shell:
 112           !include-raw: ./anteater-security-audit.sh
 113
 114 - builder:
 115     name: report-security-audit-result-to-gerrit
 116     builders:
 117       - shell:
 118           !include-raw: ./anteater-report-to-gerrit.sh
 119
 120 # yamllint disable rule:indentation
 121 - builder:
 122     name: anteater-security-audit-weekly
 123     builders:
 124       - shell:
 125           !include-raw:
 126               - ./anteater-clone-all-repos.sh
 127               - ./anteater-security-audit-weekly.sh
 128 # yamllint enable rule:indentation