Due to an upstream buildah project compromise all the tagged images have
been removed and only the latest version is currently available so we
have to adopt it to continue building containers.

Bump version to v1.5.2

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <drew.reed@arm.com>

Ziad Elhanafy authored Jul 18, 2023 and Drew Reed committed Jul 18, 2023

Gitlab CI by default just fetches 20 commits
from the repository and doesn't do a full clone.

If we have files which were not changed for a long time
(Before those 20 fetched commits).
When codeclimate-headercheck runs and it calls this BQA tools method:
https://gitlab.oss.arm.com/engineering/ais/bqa-tools/-/blob/main/tools/qa-checks/header_check.py#L294


It tries to get the history for each file
(Which was last changed before those 20 commits),
the method fails and it goes to the last return statement
"return time.gmtime(os.path.getmtime(path))"
which just gives the file's local time in which it was cloned,
so it gives the error saying
"Copyright final year doesn't match the file's last modification"
Because it thinks the file was modified in the current year
but in reality it was not.

Set GIT_STRATEGY variable to clone and set
GIT_DEPTH to 0 to clone the complete history of the
repository.

Changelog: bug
Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

To enable the differentiation of the runner tags between server we allow
the setting of the RUNNER_TAG_SCOPE variable whose value will be added
to the end of the 3 required runner tags.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Some projects and kas container versions may not wish to run as the non
default UID/GID so we should not set the default UID/GID in the
template.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The default location for CI scripts is now `scripts` (it used to be
`.gitlab/scripts`). Update the default values for `FETCH_SCRIPT` in
`Collate-Results` and `complete-lava-job`.

When they are updated, projects which still use the old location must
either move their scripts or override the value of `FETCH_SCRIPT`.

Changelog: other
Signed-off-by: Adam Johnston <adam.johnston@linaro.org>

Project local CI scripts may be in `.gitlab/scripts` but in the template
project they are in `scripts`. This causes Collate-Results to silently
fail when it fetches `child-job-test-report.py`

Changelog: bug
Signed-off-by: Adam Johnston <adam.johnston@linaro.org>

Debbie Martin authored May 12, 2023 and Drew Reed committed Jun 08, 2023

Pull the zjkyz8/codeclimate-cppcheck image which has support for
the suppressions-list option.

Changelog: other
Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

On GitLab.com the API call to find the template project information to
retrieve it's ID fails with a 500 Server Error message.  This is
believed to be due to the execution time of the call being exceeded on a
server with such a large number of projects.  It appears that we no
longer need to use this API as we can access the projects artifacts
using the project name directly.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Set the feature flags on kuberbetes that cause it run the container
entrypoints by default so that it's behaviour matches docker and docker+
machine GitLab configurations.
Sets the release-note, danger-review and container building jobs for
this repo to not run the default enterypoint for the container as for
the yq-ubuntu, dangerimage and buildah containers it do not accept being
passed shell scripts.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The original use of CI_REGISTRY/CI_PROJECT_PATH results in invalid
registry access paths as the CI_PROJECT_PATH could contain uppercase
letters that are not allowed in registry paths.  The change switches to
the correctly formatted CI_REGISTRY_IMAGE variable in image references.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now uses the cspell plugin to check the spelling and inclusive language
usage for the repo.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of cspell for spell checking files.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Refactored the 2 python scripts to eliminate all flagged python issues.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now this repo contains a number of python scripts for use during build
we need to enable the pep8 and sonar-python codeclimate plugins to
ensure static analysis of these scripts are performed.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the clang-format tool for ensuring code files
follow the project defined style

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

As a number of the CI failures we are seeing are not related to the
pipeline code we should retry jobs on infrastructure type failures at
least once before failing the pipeline.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

To ensure we follow the current OSS office guidance around copyright
notices we should switch the expected format to be the option 1 format
list on the guidance page.
All files have had their copyright headers updated to ensure local
codeclimate runs are clean still.
Also removed a couple of entries in the headercheck exclude list for
files that do not exist in this repo.

Changelog: other
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the cmakelint tool for performing static analysis
of cmake makefiles.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

The tag used on the default job definition has been changed from aarch64
to arm64 to match the tag inuse on the runners.

Changelog: bug
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

By adding some FF_ variables to a job it is possable to reenable
containers to run their entrypoints before the job script.  With the kas
container this allows us to set the user and group id the build will run
as and so not trigger the can't build as root kas error.

Signed-off-by: Drew Reed <Drew.Reed@arm.com>

Now enables the use of the oelint-adv tool for preforming static
analysis of bitbake configuration files.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>

GitLab has support for running the GitLeaks tool via it's Secret
Detection template so we include this template and configure it to run
in our environment.

Changelog: feature
Signed-off-by: Drew Reed <Drew.Reed@arm.com>