gosec-docker/.drone.yml

---
kind: pipeline
type: kubernetes
name: linter

platform:
  os: linux

steps:
- name: markdown lint
  commands:
  - markdownlint *.md
  image: docker.io/volkerraschek/markdownlint:0.32.2
  resources:
    limits:
      cpu: 150
      memory: 150M

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  resources:
    limits:
      cpu: 150
      memory: 150M
  when:
    status:
    - changed
    - failure

trigger:
  event:
    exclude:
    - tag

---
kind: pipeline
type: docker
name: dry-run-amd64

platform:
  os: linux
  arch: amd64

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: false
    dry_run: true
    tags: latest-amd64
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

depends_on:
- linter

trigger:
  branch:
    exclude:
    - master
  event:
  - pull_request
  - push
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: docker
name: dry-run-arm-v7

platform:
  os: linux
  arch: arm

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: false
    dry_run: true
    tags: latest-arm-v7
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

depends_on:
- linter

trigger:
  branch:
    exclude:
    - master
  event:
  - pull_request
  - push
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: docker
name: dry-run-arm64-v8

platform:
  os: linux
  arch: arm64

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: false
    dry_run: true
    tags: latest-arm64-v8
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

depends_on:
- linter

trigger:
  branch:
    exclude:
    - master
  event:
  - pull_request
  - push
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: docker
name: latest-amd64

platform:
  os: linux
  arch: amd64

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: false
    tags: latest-amd64
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

depends_on:
- linter

trigger:
  branch:
  - master
  event:
  - cron
  - push
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: docker
name: latest-arm-v7

platform:
  os: linux
  arch: arm

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: false
    tags: latest-arm-v7
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

depends_on:
- linter

trigger:
  branch:
  - master
  event:
  - cron
  - push
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: docker
name: latest-arm64-v8

platform:
  os: linux
  arch: arm64

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: false
    tags: latest-arm64-v8
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

depends_on:
- linter

trigger:
  branch:
  - master
  event:
  - cron
  - push
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: kubernetes
name: latest-manifest

steps:
- name: build-manifest
  image: docker.io/plugins/manifest:latest
  settings:
    auto_tag: false
    ignore_missing: true
    spec: manifest.tmpl
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  resources:
    limits:
      cpu: 150
      memory: 150M
  when:
    status:
    - changed
    - failure

depends_on:
- latest-amd64
- latest-arm-v7
- latest-arm64-v8

trigger:
  branch:
  - master
  event:
  - cron
  - push
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: docker
name: tagged-amd64

platform:
  os: linux
  arch: amd64

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: true
    auto_tag_suffix: amd64
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    build_args:
    - GOSEC_VERSION=${DRONE_TAG}
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

trigger:
  event:
  - tag
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: docker
name: tagged-arm-v7

platform:
  os: linux
  arch: arm

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: true
    auto_tag_suffix: arm-v7
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    build_args:
    - GOSEC_VERSION=${DRONE_TAG}
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

trigger:
  event:
  - tag
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: docker
name: tagged-arm64-v8

platform:
  os: linux
  arch: arm64

steps:
- name: build
  image: docker.io/plugins/docker:latest
  settings:
    dockerfile: Dockerfile
    auto_tag: true
    auto_tag_suffix: arm64-v8
    repo: volkerraschek/gosec
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password
    build_args:
    - GOSEC_VERSION=${DRONE_TAG}
    no_cache: true

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  when:
    status:
    - changed
    - failure

trigger:
  event:
  - tag
  repo:
  - volker.raschek/gosec-docker

---
kind: pipeline
type: kubernetes
name: tagged-manifest

steps:
- name: build-manifest
  image: docker.io/plugins/manifest:latest
  settings:
    auto_tag: true
    ignore_missing: true
    spec: manifest.tmpl
    username:
      from_secret: container_image_registry_user
    password:
      from_secret: container_image_registry_password

- name: email-notification
  environment:
    SMTP_FROM_ADDRESS:
      from_secret: smtp_from_address
    SMTP_FROM_NAME:
      from_secret: smtp_from_name
    SMTP_HOST:
      from_secret: smtp_host
    SMTP_USERNAME:
      from_secret: smtp_username
    SMTP_PASSWORD:
      from_secret: smtp_password
  image: docker.io/volkerraschek/drone-email:0.1.1
  resources:
    limits:
      cpu: 150
      memory: 150M
  when:
    status:
    - changed
    - failure

depends_on:
- tagged-amd64
- tagged-arm-v7
- tagged-arm64-v8

trigger:
  event:
  - tag
  repo:
  - volker.raschek/gosec-docker