tfa-next: add static checks

Add a new job to run static, formatting and lint checks on tfa-next
before building.

Signed-off-by: Zachary Leaf <zachary.leaf@arm.com>
Change-Id: I5bad94fbf5d0c17aba04d330a0b982a47a1aa38c
diff --git a/tf-a-static-tfa-next.yaml b/tf-a-static-tfa-next.yaml
new file mode 100644
index 0000000..5ea09d0
--- /dev/null
+++ b/tf-a-static-tfa-next.yaml
@@ -0,0 +1,78 @@
+- job:
+    name: tf-a-static-tfa-next
+    node: docker-amd64-tf-a-jammy
+    project-type: freestyle
+    concurrent: true
+    disabled: false
+    defaults: global
+    description: Run formatting, static checks and lints
+    properties:
+        - build-discarder:
+            days-to-keep: 14
+    parameters:
+        - string:
+            name: TF_GERRIT_PROJECT
+            default: 'TF-A/trusted-firmware-a'
+        - string:
+            name: TF_GERRIT_BRANCH
+            default: 'refs/heads/tfa-next'
+        - string:
+            name: TF_GERRIT_REFSPEC
+            default: '+refs/heads/tfa-next:refs/remotes/origin/tfa-next'
+        - string:
+            name: TFTF_GERRIT_PROJECT
+            default: 'TF-A/tf-a-tests'
+        - string:
+            name: TFTF_GERRIT_BRANCH
+            default: 'refs/heads/master'
+        - string:
+            name: TFTF_GERRIT_REFSPEC
+            default: '+refs/heads/master:refs/remotes/origin/master'
+        - string:
+            name: CI_REFSPEC
+            default: '+refs/heads/tfa-next:refs/remotes/origin/tfa-next'
+        - string:
+            name: GERRIT_BRANCH
+            default: ''
+        - string:
+            name: SHARE_FOLDER
+            default: '/srv/shared/${JOB_NAME}/${BUILD_NUMBER}'
+            description: 'Folder containing shared repositories for downstream pipeline jobs'
+    wrappers:
+        - credentials-binding:
+            - ssh-user-private-key:
+                credential-id: TFA_CI_BOT_USER_SSH_KEY
+                key-file-variable: CI_BOT_KEY
+                username-variable: CI_BOT_USERNAME
+                passphrase-variable: ''
+        - timestamps
+        - timeout:
+            timeout: 240
+            fail: true
+    builders:
+    - shell:
+        !include-raw: scripts/clone.sh
+    - shell: |
+       #!/bin/bash
+       set -e
+       cat << EOF > env.param
+       QA_SERVER_PROJECT=${JOB_NAME}
+       QA_SERVER_VERSION=${BUILD_NUMBER}
+       GERRIT_PROJECT=${TF_GERRIT_PROJECT}
+       GERRIT_BRANCH=${TF_GERRIT_BRANCH}
+       GERRIT_REFSPEC=${TF_GERRIT_REFSPEC}
+       EOF
+       cd ${WORKSPACE}/trusted-firmware-a
+       # Executed project-related static checks: copyright, unix line endings,
+       # formatting and lints
+       IS_CONTINUOUS_INTEGRATION=1 ${WORKSPACE}/tf-a-ci-scripts/script/next-checks/next-checks.sh
+    publishers:
+        - archive:
+            artifacts: 'trusted-firmware-a/next-checks.log'
+        # TODO: it is not possible to give this groovy script the
+        #       auth/permissions required to access next-checks.log
+        #       uncomment this once the job is made public
+        # - groovy-postbuild:
+        #     script:
+        #         !include-raw:
+        #           - tf-a-static-tfa-next/postbuild.groovy