.drone.yml

# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
# Use of this source code is governed by a proprietary
# license that can be found in the LICENSE file.

kind: pipeline
type: docker
name: release

trigger:
  branch:
    - main
  event:
    - cron
    - push

steps:
  - name: build-and-push
    image: docker:24.0.6-dind-alpine3.18
    environment:
      REGISTRY: quay.io
      REGISTRY_USER:
        from_secret: registry_user
      REGISTRY_PASSWORD:
        from_secret: registry_password
    volumes:
      - name: dockersock
        path: /var/run/docker.sock
    commands:
      - image_name=$${REGISTRY}/sighup/trivy-offline
      - full_date_tag=$(date +"%Y-%m-%d")
      - docker login $${REGISTRY} -u $${REGISTRY_USER} -p $${REGISTRY_PASSWORD}
      - docker build --pull --no-cache -t $${image_name}:$${full_date_tag} -t $${image_name}:0.46.1 -t $${image_name}:latest .
      - docker push $${image_name}:$${full_date_tag}
      - docker push $${image_name}:0.46.1
      - docker push $${image_name}:latest

volumes:
  - name: dockersock
    host:
      path: /var/run/docker.sock

---
kind: pipeline
type: docker
name: example

trigger:
  branch:
    - main
  event:
    - cron
    - push

steps:
  - name: scan
    image: quay.io/sighup/trivy-offline:latest
    pull: always
    commands:
      - trivy image --skip-update python:3.12-alpine