ci: Fixed sast

[mpd-sima.git] / .gitlab-ci.yml

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 228dcfbe8805279de22af36f8d20aa6b610da842..0ae3330bc704e3bac579e630abf63b85263a4c60 100644 (file)
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -5,11 +5,13 @@ image: python:3
 include:
   - local: .gitlab/gitlab-templates.yml
   - local: .gitlab/pylint.yml
-  - template: Security/SAST.gitlab-ci.yml
+  - template: Jobs/SAST.gitlab-ci.yml
 
 variables:
   #XDG_CACHE_HOME: "$CI_PROJECT_DIR/.cache"
   PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache"
+  SAST_EXCLUDED_ANALYZERS: brakeman, flawfinder, kubesec, mobsf, nodejs-scan,
+    phpcs-security-audit, pmd-apex, sobelow, spotbugs
 
 cache:
   paths:
@@ -22,26 +24,34 @@ stages:
 smoketest:
   stage: test
   script:
-  - pip install requests python-musicpd
+  - pip install requests python-musicpd sphinx
   - python setup.py test
   # build wheel and source
   - python setup.py bdist_wheel sdist
+  # manual and HTML documentation
+  - python setup.py build_sphinx
   # install
   - pip install dist/*.whl
   # smoke test
   - mpd-sima --help
+  - TRACE=y ./mpd-sima -d --pid ./mpd-sima.pid -l ./mpd-sima.log
+  - sleep 10
+  - test -f ./mpd-sima.pid && kill $(cat ./mpd-sima.pid)
   artifacts:
     expire_in: 1 hour
     paths:
     - dist/*.whl
     - dist/*.tar.gz
     - dist/*.zip
+    - ./mpd-sima.pid
+    - ./mpd-sima.log
 
 unittests:
   stage: test
   script:
   - pip install pytest-cov requests python-musicpd
   - py.test -q --cov=sima --junitxml=report.xml tests
+  coverage: '/(?i)total.*? (100(?:\.0+)?\%|[1-9]?\d(?:\.\d+)?\%)$/'
   artifacts:
     when: always
     reports:
@@ -57,12 +67,6 @@ vinstall:
   artifacts:
     expire_in: 1 hour
 
-sast:
-  variables:
-    SAST_EXCLUDED_ANALYZERS: brakeman, eslint, flawfinder, gosec, kubesec, nodejs-scan,
-      phpcs-security-audit, pmd-apex, security-code-scan, semgrep, sobelow, spotbugs
-  stage: test
-
 tag_release:
   stage: build
   dependencies: