- job:
    name: mbed-tls-restricted-pr
    description: 'mbedtls restricted PR job'
    project-type: multibranch
    prune-dead-branches: true
    days-to-keep: -1
    num-to-keep: -1
    script-path: tests/.jenkins/Jenkinsfile
    properties:
      - raw:
          xml: |
            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
              <libraries>
                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
                  <name>mbedtls-test</name>
                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
                      <repoOwner>Mbed-TLS</repoOwner>
                      <repository>mbedtls-test</repository>
                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
                    </scm>
                  </retriever>
                  <defaultVersion>master</defaultVersion>
                  <implicit>true</implicit>
                  <allowVersionOverride>true</allowVersionOverride>
                  <includeInChangesets>true</includeInChangesets>
                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
              </libraries>
            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
    scm:
    - github:
        api-uri: https://api.github.com
        credentials-id: mbedtls-github-token
        repo-owner: Mbed-TLS
        repo: mbedtls-restricted
        repository-url: ssh://git@github.com/Mbed-TLS/mbedtls-restricted.git
        branch-discovery: no-pr
        discover-pr-forks-strategy: both
        discover-pr-forks-trust: permission
        discover-pr-origin: both
        head-filter-regex: '(?!^PR-(758|759|850|906|916|919)-(merge|head)$)(PR-\d+-(merge|head))'
        property-strategies:
          all-branches:
          - pipeline-branch-durability-override: performance-optimized
        submodule:
          disable: false
          recursive: true
          tracking: false
          parent-credentials: false
        ssh-checkout:
          credentials: mbedtls-github-ssh