include:
  - template: Security/SAST.gitlab-ci.yml

stages:
    - build
    - test
    - release

default:
    image: registry.gitlab.com/dmoonfire/nix-flake-docker:latest

build:
    stage: build
    script:
        - nix develop --command .gitlab/build.sh
    rules:
        - if: $CI_COMMIT_BRANCH

test:
    stage: test
    script:
        - nix develop --command .gitlab/test.sh
    artifacts:
        when: always
        paths:
            - ./**/*test-result.xml
            - ./coverage/Cobertura.xml
            - ./coverage/Summary.*
            - ./**/*.nupkg
        reports:
            junit:
                - ./**/*test-result.xml
            cobertura:
                - ./coverage/Cobertura.xml

publish:
    stage: release
    script:
        - nix develop --command .gitlab/release.sh
    rules:
        - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH