include:
  - template: Security/SAST.gitlab-ci.yml

# Nix handling based on https://gitlab.com/Vonfry/gitlab-ci-nix/-/blob/master/.gitlab-ci.yml
stages:
    - build
    - test
    - release

variables:
    GIT_SUBMODULE_STRATEGY: recursive
    LOCAL_NIX_STORE: $CI_PROJECT_DIR/.nix/store

default:
    image: nixos/nix:latest
    before_script:
        - "[ -f $LOCAL_NIX_STORE ] && nix-store --import < $LOCAL_NIX_STORE"
    after_script:
        - "[ ! -d $(dirname \"$LOCAL_NIX_STORE\") ] && mkdir -p $LOCAL_NIX_STORE"
        - "[ -h ./result ] && nix-store --export $(nix-store --query --requisites --include-outputs ./result) > $LOCAL_NIX_STORE"
    cache:
        paths:
            - .nix/

build:
    stage: build
    script:
        - nix-shell --run "npm install --ci"
        - nix-shell --run "npx commitlint-gitlab-ci -x @commitlint/config-conventional"
        - nix-shell --run "npm run build"

    rules:
        - if: $CI_COMMIT_BRANCH

#test:
#    stage: test
#    script:
#        - nix-shell --run "npm run test"
#        # Testing is currently not working.
#        #- 'dotnet test --test-adapter-path:. --logger:"junit;LogFilePath=../artifacts/{assembly}-test-result.xml;MethodFormat=Default;FailureBodyFormat=Verbose" --collect:"XPlat Code Coverage"'
#
#        # Summarize the output for Gitlab CI reporting.
#        #- dotnet new tool-manifest
#        #- dotnet tool install dotnet-reportgenerator-globaltool
#        #- dotnet tool run reportgenerator -reports:src/*/TestResults/*/coverage.cobertura.xml -targetdir:./coverage "-reporttypes:Cobertura;TextSummary"
#        #- grep "Line coverage" coverage/Summary.txt
#    artifacts:
#        when: always
#        paths:
#            - ./**/*test-result.xml
#            - ./coverage/Cobertura.xml
#            - ./coverage/Summary.*
#            - ./**/*.nupkg
#        reports:
#            junit:
#                - ./**/*test-result.xml
#            cobertura:
#                - ./coverage/Cobertura.xml

publish:
    stage: release
    script:
        - nix-shell --run "npm install --ci"
        - nix-shell --run "npm run build"
        - nix-shell --run "npx semantic-release"
    rules:
        - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH