stages:
  - generate-api-clients
  - build

variables:
  REGISTRY: devnexus.krohne.com:18079/repository/docker-krohne
  IMAGE_NAME: $REGISTRY/$CI_PROJECT_NAME
  DTRACK_API_URL: https://dtrack-api-rd.krohne.com
  DEFECTDOJO_API_URL: https://defectdojo-rd.krohne.com
  KROHNE_CA_URL: https://devwiki.krohnegroup.com/lib/exe/fetch.php?media=krohne-ca.crt
  KROHNE_CA_CHECKSUM: a921e440a742f1e67c7714306e2c0d76

.generate-api:
  stage: generate-api-clients
  image: openapitools/openapi-generator-cli:v7.12.0
  tags:
    - linux
    - docker
    - bash
  rules:
    - if: '$CI_COMMIT_BRANCH == "main"'
    - if: '$CI_COMMIT_TAG'
  before_script:
    - curl --insecure $KROHNE_CA_URL -o krohne-ca.crt
    - echo "$KROHNE_CA_CHECKSUM  krohne-ca.crt" | md5sum -c 
    - mv krohne-ca.crt /usr/local/share/ca-certificates
    - update-ca-certificates


generate-dtrack-api:
  extends: .generate-api
  artifacts:
    paths:
      - dependencytrack-client
    expire_in: 1 week
  script:
    - curl ${DTRACK_API_URL}/api/openapi.json > dependencytrack-openapi.json
    - |
      docker-entrypoint.sh \
      author template \
        -g python \
        -o dependencytrack-openapi-custom-template 
    - sed -i 's/import re/import regex as re/' dependencytrack-openapi-custom-template/model_anyof.mustache 
    - sed -i 's/import re/import regex as re/' dependencytrack-openapi-custom-template/model_generic.mustache 
    - |
      docker-entrypoint.sh \
      generate \
        -i dependencytrack-openapi.json \
        -g python \
        -o dependencytrack-client \
        --package-name dependencytrack_api \
        -t dependencytrack-openapi-custom-template


generate-defectdojo-api:
  extends: .generate-api
  artifacts:
    paths:
      - defectdojo-client
    expire_in: 1 week
  script:
    - curl ${DEFECTDOJO_API_URL}/api/v2/oa3/schema/?format=json > defectdojo-openapi.json
    - |
      docker-entrypoint.sh \
      generate \
        -i defectdojo-openapi.json \
        -g python \
        -o defectdojo-client \
        --package-name defectdojo_api 

dockerize:
  stage: build
  image: devnexus.krohne.com:18079/repository/docker-krohne/krohnedockerbash:0.5
  tags:
    - linux
    - docker
    - bash
  rules:
    - if: '$CI_COMMIT_TAG'
  script:
    - docker build --build-arg ADDITIONAL_CA_URL="$KROHNE_CA_URL"
                   --build-arg ADDITIONAL_CA_CHECKSUM=$KROHNE_CA_CHECKSUM
                   --tag $IMAGE_NAME:latest 
                   --tag $IMAGE_NAME:$CI_COMMIT_SHA
                   --tag $IMAGE_NAME:$CI_COMMIT_TAG
                   .
    - docker login -u $NEXUS_USER -p $NEXUS_PASSWORD $REGISTRY
    - docker push $IMAGE_NAME:latest
    - docker push $IMAGE_NAME:$CI_COMMIT_SHA
    - docker push $IMAGE_NAME:$CI_COMMIT_TAG

build-windows-binary:
  stage: build
  tags:
    - windows
    - pwsh
    - python3.13
  rules:
    - if: '$CI_COMMIT_TAG'
  artifacts:
    paths:
      - sbom-dt-dd.exe
  script:
    - |
      cd src
      mv ..\dependencytrack-client .
      mv ..\defectdojo-client .
      & 'C:\Program Files\Python313\python.exe' -m venv venv
      .\venv\Scripts\pip.exe install --upgrade pip
      .\venv\Scripts\pip.exe install -r requirements.txt
      .\venv\Scripts\pip.exe install -r dependencytrack-client\requirements.txt
      .\venv\Scripts\pip.exe install -r defectdojo-client\requirements.txt
      .\venv\Scripts\pip.exe install pyinstaller
      .\venv\Scripts\pyinstaller.exe --onefile sbom-dt-dd.py
      mv dist\sbom-dt-dd.exe ..