Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now uses the cspell plugin to check the spelling and inclusive language
usage for the repo.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of cspell for spell checking files.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Refactored the 2 python scripts to eliminate all flagged python issues.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now this repo contains a number of python scripts for use during build
we need to enable the pep8 and sonar-python codeclimate plugins to
ensure static analysis of these scripts are performed.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the clang-format tool for ensuring code files
follow the project defined style

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

As a number of the CI failures we are seeing are not related to the
pipeline code we should retry jobs on infrastructure type failures at
least once before failing the pipeline.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

To ensure we follow the current OSS office guidance around copyright
notices we should switch the expected format to be the option 1 format
list on the guidance page.
All files have had their copyright headers updated to ensure local
codeclimate runs are clean still.
Also removed a couple of entries in the headercheck exclude list for
files that do not exist in this repo.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the cmakelint tool for performing static analysis
of cmake makefiles.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The tag used on the default job definition has been changed from aarch64
to arm64 to match the tag inuse on the runners.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By adding some FF_ variables to a job it is possable to reenable
containers to run their entrypoints before the job script.  With the kas
container this allows us to set the user and group id the build will run
as and so not trigger the can't build as root kas error.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the oelint-adv tool for preforming static
analysis of bitbake configuration files.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

GitLab has support for running the GitLeaks tool via it's Secret
Detection template so we include this template and configure it to run
in our environment.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By using the latest SAST template we can remove the custom definition
of the SAST rules as the latest template contains the changes to the
default rules to ensure they run on commit branchs and on merge requests

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Robbie Cao <robbie.cao@arm.com>

Add a rule to support triggering from multi-project pipeline. With this
change, the pipeline can be triggered to run as a downstream pipeline.

Changelog: other
Signed-off-by: Robbie Cao <robbie.cao@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Kaniko used to do the push of the built image to the registry as part of
the build step but buildah does not do that so we have to push the image
ourselves after it is built

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Fetch and use the new inclusivity language use checker

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The latest set of GitLab runners have been configured in a way that
means docker will not work so we need to switch to another tool that can
create multiarch images on these new runners.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The template lava job completion script will now generate a junit test
result file based on the lava test report by downloading a conversion
script if required and running it.

Chnagelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Rather than duplicate the template downloading script block in the
Collate-Results job we now use the common scipt block.
Correct the path to look for by default for a local version of the
script.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

To allow other jobs to access script files stored in this template repo
a new common template job is provided to help download needed scripts.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By moving the status check on the lava job submission call from the
after_script section to the script section it will fail the job correctly
if lava rejects the submitted job.
Rather than having to copy the whole script section in jobs that wish to
dynamically create the test file the entire job submission and check can
be included using the !reference GitLab yaml include.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>