Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Set the feature flags on kuberbetes that cause it run the container
entrypoints by default so that it's behaviour matches docker and docker+
machine GitLab configurations.
Sets the release-note, danger-review and container building jobs for
this repo to not run the default enterypoint for the container as for
the yq-ubuntu, dangerimage and buildah containers it do not accept being
passed shell scripts.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The original use of CI_REGISTRY/CI_PROJECT_PATH results in invalid
registry access paths as the CI_PROJECT_PATH could contain uppercase
letters that are not allowed in registry paths.  The change switches to
the correctly formatted CI_REGISTRY_IMAGE variable in image references.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now uses the cspell plugin to check the spelling and inclusive language
usage for the repo.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of cspell for spell checking files.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Refactored the 2 python scripts to eliminate all flagged python issues.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now this repo contains a number of python scripts for use during build
we need to enable the pep8 and sonar-python codeclimate plugins to
ensure static analysis of these scripts are performed.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the clang-format tool for ensuring code files
follow the project defined style

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

As a number of the CI failures we are seeing are not related to the
pipeline code we should retry jobs on infrastructure type failures at
least once before failing the pipeline.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

To ensure we follow the current OSS office guidance around copyright
notices we should switch the expected format to be the option 1 format
list on the guidance page.
All files have had their copyright headers updated to ensure local
codeclimate runs are clean still.
Also removed a couple of entries in the headercheck exclude list for
files that do not exist in this repo.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the cmakelint tool for performing static analysis
of cmake makefiles.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The tag used on the default job definition has been changed from aarch64
to arm64 to match the tag inuse on the runners.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By adding some FF_ variables to a job it is possable to reenable
containers to run their entrypoints before the job script.  With the kas
container this allows us to set the user and group id the build will run
as and so not trigger the can't build as root kas error.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the oelint-adv tool for preforming static
analysis of bitbake configuration files.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

GitLab has support for running the GitLeaks tool via it's Secret
Detection template so we include this template and configure it to run
in our environment.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By using the latest SAST template we can remove the custom definition
of the SAST rules as the latest template contains the changes to the
default rules to ensure they run on commit branchs and on merge requests

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Robbie Cao <robbie.cao@arm.com>

Add a rule to support triggering from multi-project pipeline. With this
change, the pipeline can be triggered to run as a downstream pipeline.

Changelog: other
Signed-off-by: Robbie Cao <robbie.cao@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Kaniko used to do the push of the built image to the registry as part of
the build step but buildah does not do that so we have to push the image
ourselves after it is built

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Fetch and use the new inclusivity language use checker

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The latest set of GitLab runners have been configured in a way that
means docker will not work so we need to switch to another tool that can
create multiarch images on these new runners.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>