Signed-off-by: Drew Reed <Drew.Reed@arm.com>

As a number of the CI failures we are seeing are not related to the
pipeline code we should retry jobs on infrastructure type failures at
least once before failing the pipeline.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

To ensure we follow the current OSS office guidance around copyright
notices we should switch the expected format to be the option 1 format
list on the guidance page.
All files have had their copyright headers updated to ensure local
codeclimate runs are clean still.
Also removed a couple of entries in the headercheck exclude list for
files that do not exist in this repo.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the cmakelint tool for performing static analysis
of cmake makefiles.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The tag used on the default job definition has been changed from aarch64
to arm64 to match the tag inuse on the runners.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By adding some FF_ variables to a job it is possable to reenable
containers to run their entrypoints before the job script.  With the kas
container this allows us to set the user and group id the build will run
as and so not trigger the can't build as root kas error.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the oelint-adv tool for preforming static
analysis of bitbake configuration files.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

GitLab has support for running the GitLeaks tool via it's Secret
Detection template so we include this template and configure it to run
in our environment.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By using the latest SAST template we can remove the custom definition
of the SAST rules as the latest template contains the changes to the
default rules to ensure they run on commit branchs and on merge requests

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Robbie Cao <robbie.cao@arm.com>

Add a rule to support triggering from multi-project pipeline. With this
change, the pipeline can be triggered to run as a downstream pipeline.

Changelog: other
Signed-off-by: Robbie Cao <robbie.cao@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Kaniko used to do the push of the built image to the registry as part of
the build step but buildah does not do that so we have to push the image
ourselves after it is built

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Fetch and use the new inclusivity language use checker

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The latest set of GitLab runners have been configured in a way that
means docker will not work so we need to switch to another tool that can
create multiarch images on these new runners.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The template lava job completion script will now generate a junit test
result file based on the lava test report by downloading a conversion
script if required and running it.

Chnagelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Rather than duplicate the template downloading script block in the
Collate-Results job we now use the common scipt block.
Correct the path to look for by default for a local version of the
script.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

To allow other jobs to access script files stored in this template repo
a new common template job is provided to help download needed scripts.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By moving the status check on the lava job submission call from the
after_script section to the script section it will fail the job correctly
if lava rejects the submitted job.
Rather than having to copy the whole script section in jobs that wish to
dynamically create the test file the entire job submission and check can
be included using the !reference GitLab yaml include.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

When the release jobs are added to a manually triggered pipeline they
should not block the pipeline as the running of them is intended to be
optional.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

When using the GitLab API we need to provide a PRIVATE CI token and this
should be configurable by users of the job.  By default we use the
CI_BOT_TOKEN as used by the Changelog generator

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

If the child pipeline test result fetcher script already exists in a
repo don't fetch it from this repo but use it instead to allow people to
customize the way the results are presented.
Don't use the failure block in the output xml for test errors, use the
error block instead and use the failure block to failures only.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Codeclimate tries to use a local version of the non externally published
plugins using the latest tag. This change ensures we fetch the latest
tagged version rather than the main version it was looking for and that
it looks like it was pulled from docker.io.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Add jobs to help create run and get test results from child pipelines

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Following the GitLab server upgarde to 15.5 the SAST rules need updating
to match the modified upstream template

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Version the templates and enable changelog generation and releasing
based on updates to the version information

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Migrate the headercheck code climate configuration to the newer format
that allows the setting of the allowed license types for the repo

Signed-off-by: Drew Reed <Drew.Reed@arm.com>