image: node:20

definitions:
  services:
    docker:
      memory: 2048

pipelines:
  branches:
    main:
      - step:
          name: Test and build
          caches:
            - node
          script:
            - npm ci
            - npm run lint
            - npm test -- --ci
            - npm run build
      - step:
          name: Build image
          services:
            - docker
          script:
            - docker login -u "$REGISTRY_USER" -p "$REGISTRY_PASSWORD" "$REGISTRY"
            - docker build -t "$REGISTRY/pipery/api:$BITBUCKET_COMMIT" .
            - docker push "$REGISTRY/pipery/api:$BITBUCKET_COMMIT"
      - step:
          name: Deploy
          deployment: production
          script:
            - gcloud auth activate-service-account --key-file "$GCP_SERVICE_ACCOUNT_KEY"
            - kubectl set image deployment/api api="$REGISTRY/pipery/api:$BITBUCKET_COMMIT" --namespace production
            - kubectl rollout status deployment/api --namespace production

# Pipery shared template repository in the same Bitbucket workspace:
# shared-pipelines/.bitbucket/shared-pipelines.yml
export: true

definitions:
  pipelines:
    pipery-npm-to-cloudrun:
      - step:
          name: Setup npm Environment
          image: node:20-alpine
          caches:
            - node
          script:
            - cd ${PROJECT_PATH:-.}
            - npm ci
      - parallel:
          - step:
              name: SAST Security Scan
              image: python:3.11-alpine
              script:
                - pip install --quiet pipery-tooling
                - pipery-tooling sast --project-path ${PROJECT_PATH:-.} --log-file ${LOG_FILE:-pipery.jsonl}
          - step:
              name: SCA Security Scan
              image: python:3.11-alpine
              script:
                - pip install --quiet pipery-tooling
                - pipery-tooling sca --project-path ${PROJECT_PATH:-.} --log-file ${LOG_FILE:-pipery.jsonl}
      - step:
          name: Build Application
          image: node:20-alpine
          script:
            - cd ${PROJECT_PATH:-.}
            - npm run build
      - step:
          name: Deploy to Cloud Run
          image: google/cloud-sdk:alpine
          script:
            - pipery-cloudrun deploy
      - step:
          name: Publish Pipery Logs
          script:
            - test -f ${LOG_FILE:-pipery.jsonl} && tail -n 20 ${LOG_FILE:-pipery.jsonl} || true

---
# Application repository:
# bitbucket-pipelines.yml
definitions:
  imports:
    pipery-custom: shared-pipelines:master:.bitbucket/shared-pipelines.yml
    pipery-standard: shared-pipelines:master

pipelines:
  branches:
    main:
      import: pipery-npm-to-cloudrun@pipery-custom

  custom:
    run-pipery-npm-to-cloudrun:
      import: pipery-npm-to-cloudrun@pipery-standard