-
Notifications
You must be signed in to change notification settings - Fork 0
/
.drone.yml
123 lines (110 loc) · 2.38 KB
/
.drone.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
---
kind: pipeline
name: default
platform:
os: linux
arch: amd64
clone:
disable: true
steps:
- name: git
pull: default
image: plugins/git
settings:
recursive: false
tags: true
- name: clone
pull: default
image: python:3.7.3-alpine3.8
commands:
- apk --update add openssh-client git
# write the ssh key to disk
- mkdir /root/.ssh
- echo -n "$SSH_KEY" > /root/.ssh/id_rsa
- chmod 600 /root/.ssh/id_rsa
# add github to known hosts
- touch /root/.ssh/known_hosts
- chmod 600 /root/.ssh/known_hosts
- ssh-keyscan github.com > ~/.ssh/known_hosts 2> /dev/null
# pull the git submodules
- git submodule update --init
- git submodule update --init --recursive
# workaround for diff-cover
- git fetch origin master:refs/remotes/origin/master
environment:
SSH_KEY:
from_secret: deploy_key
when:
event:
- push
- name: py27-django111 test
pull: default
image: python:2.7.16-alpine3.8
commands:
- apk --update add bash
- scripts/cicd/build.sh
- pip install -r requirements/development.txt
- scripts/cicd/test.sh py27-django111
environment:
GITHUB_TOKEN:
from_secret: github_token
when:
event:
- push
- name: py37-django22 test
pull: default
image: python:3.7.3-alpine3.8
commands:
- apk --update add bash
- scripts/cicd/build.sh
- pip install -r requirements/development.txt
- scripts/cicd/test.sh py37-django22
environment:
GITHUB_TOKEN:
from_secret: github_token
when:
event:
- push
- name: secrets leaks test
pull: default
image: dxa4481/trufflehog
commands:
- trufflehog --exclude_paths trufflehog-exclude.txt --regex .
when:
event:
- push
- name: upload
pull: default
image: python:3.7.3-alpine3.8
commands:
- apk --update add bash curl
- scripts/cicd/pre-upload.sh py27-django111
- scripts/cicd/pre-upload.sh py37-django22
environment:
ARTIFACTS_SERVER:
from_secret: artifacts_server
AWS_ACCESS_KEY_ID:
from_secret: aws_access_key
AWS_SECRET_ACCESS_KEY:
from_secret: aws_secret_key
GITHUB_TOKEN:
from_secret: github_token
S3_BUCKET:
from_secret: s3_bucket
when:
event:
- push
status:
- success
- failure
services:
- name: postgres
pull: default
image: bitnami/postgresql:10.6.0
environment:
POSTGRES_DB: test
POSTGRES_USER: postgres
when:
event:
- push
...