image: node:18-alpine3.16

stages:
  - test
  - build

include:
  - template: Security/SAST.gitlab-ci.yml
  - template: Security/Secret-Detection.gitlab-ci.yml

##############
# TEST STAGE #
##############

test:
  stage: test
  variables:
    DOCKER_TLS_CERTDIR: ''
  script:
    - npm install
    - npm run lint:check
    - npm run pretty:check
  rules:
    - if: '$CI_MERGE_REQUEST_TARGET_BRANCH_NAME == $CI_DEFAULT_BRANCH || $CI_COMMIT_MESSAGE =~ /--check/ || $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
      when: always

###############
# BUILD STAGE #
###############

build:
  stage: build
  image: docker:20.10.22
  variables:
    DOCKER_TLS_CERTDIR: ''
  services:
    - docker:dind
  before_script:
    - echo -n $CI_REGISTRY_PASSWORD | docker login -u $CI_REGISTRY_USER --password-stdin $CI_REGISTRY
  script:
    - export VERSION=$(docker run --rm -v "$PWD":/usr/src/app:ro -w /usr/src/app node:slim node -p "require('./package.json').version")
    - docker pull $CI_REGISTRY_IMAGE:latest || true
    - >
      docker build 
      --pull
      --cache-from $CI_REGISTRY_IMAGE:latest
      --tag $CI_REGISTRY_IMAGE:$VERSION
      --tag $CI_REGISTRY_IMAGE:latest
      .
    - docker push $CI_REGISTRY_IMAGE:$VERSION
    - docker push $CI_REGISTRY_IMAGE:latest
  only:
    - main