---
kind: pipeline
name: check

workspace:
  base: /go
  path: src/gitea.hackmi.ch/Phil/goshorly

steps:
- name: check-format
  image: golang
  commands:
  - go fmt $(go list ./... | grep -v /vendor/)
  - go vet $(go list ./... | grep -v /vendor/)
  - go test -race $(go list ./... | grep -v /vendor/)

- name: check-sec
  image: golang
  commands: 
  - go install github.com/securego/gosec/v2/cmd/gosec@latest
  - go get -v -d .
  - gosec ./...

---
kind: pipeline
name: build

steps:
- name: build-docker
  image: docker:dind
  volumes:
  - name: dockersock
    path: /var/run
  environment:
    DOCKER_PASSWORD:
      from_secret: DOCKER_PASSWORD
  commands:
      - sleep 30
      - docker ps -a
      - docker context create build
      - docker buildx create build --use
      - echo $DOCKER_PASSWORD | docker login --username Phil --password-stdin gitea.hackmi.ch
      - docker buildx build \
        --platform linux/amd64 \
        --no-cache \
        --build-arg CI_COMMIT_BRANCH=$DRONE_COMMIT_BRANCH \
        --build-arg CI_COMMIT_SHORT_SHA=$DRONE_COMMIT_SHA \
        --build-arg CI_COMMIT_TAG=latest \
        --push \
        --tag gitea.hackmi.ch/Phil/goshorly:latest \
        .

services:
- name: docker
  image: docker:dind
  privileged: true
  volumes:
  - name: dockersock
    path: /var/run

volumes:
- name: dockersock
  temp: {}