- job:
    name: tf-a-eclair-delta
    project-type: matrix
    concurrent: true
    disabled: false
    defaults: global
    Description: |
      ECLAIR (MISRA compliance) testing of TF-A patches
    properties:
        - build-discarder:
            days-to-keep: 45
            num-to-keep: 200
            artifact-num-to-keep: 100
        - authorization:
            !include: authorization.yaml.inc
        - throttle:
            option: category
            categories: [eclair]
            matrix-builds: false
            matrix-configs: true
    parameters:
        - string:
            name: MAKE_TARGET
            default: ''
            description: |
              TF-A make target
        - string:
            name: DEBUG
            default: '1'
            description: |
              TF-A make DEBUG setting
        - string:
            name: GERRIT_HOST
            default: 'review.trustedfirmware.org'
        - string:
            name: GERRIT_PROJECT
            default: 'TF-A/trusted-firmware-a'
            description: |
              Git project to build (also set by Gerrit trigger)
        - string:
            name: GERRIT_BRANCH
            default: 'integration'
            description: |
              Git branch to build (also set by Gerrit trigger)
        - string:
            name: GERRIT_REFSPEC
            default: ''
        - string:
            name: GERRIT_CHANGE_NUMBER
            default: ''
        - string:
            name: GERRIT_PATCHSET_NUMBER
            default: ''
        - string:
            name: MBEDTLS_URL
            default: 'https://github.com/ARMmbed/mbedtls/archive/mbedtls-2.28.0.tar.gz'
            description: |
              URL of mbedTLS library to use in build (only for some configurations)
        - string:
            name: SHARE_FOLDER
            default: '/srv/shared/${JOB_NAME}/${BUILD_NUMBER}'
            description: 'Folder containing shared repositories for downstream pipeline jobs'
    axes:
        - axis:
            type: slave
            name: label
            values:
                - docker-tf-a-eclair
        - axis:
            type: user-defined
            name: TF_CONFIG
            values:
                - fvp-default
    triggers:
    - gerrit:
        silent: true
        server-name: 'review.trustedfirmware.org'
        projects:
        - branches:
          - branch-compare-type: PLAIN
            branch-pattern: integration
          project-compare-type: PLAIN
          project-pattern: 'TF-A/trusted-firmware-a'
        - branches:
          - branch-compare-type: PLAIN
            branch-pattern: integration
          project-compare-type: PLAIN
          project-pattern: 'sandbox/pfalcon/trusted-firmware-a'
        trigger-on:
        - comment-added-event:
            approval-category: "Allow-CI"
            approval-value: 1
    wrappers:
    - timestamps
    - timeout:
        timeout: 120
        fail: true
    - credentials-binding:
      - ssh-user-private-key:
          credential-id: TFA_CI_BOT_USER_SSH_KEY
          key-file-variable: CI_BOT_KEY
          username-variable: CI_BOT_USERNAME
          passphrase-variable: ''
    builders:
    - shell: |
        #!/bin/bash
        set -ex
        pwd
        env | grep GERRIT
        git clone https://git.trustedfirmware.org/ci/tf-a-ci-scripts.git
        git clone https://${GERRIT_HOST}/${GERRIT_PROJECT} -b ${GERRIT_BRANCH}
        if [ -n "${GERRIT_REFSPEC}" ]; then
        (
            cd $(basename ${GERRIT_PROJECT})
            git fetch https://${GERRIT_HOST}/${GERRIT_PROJECT} ${GERRIT_REFSPEC} && git checkout FETCH_HEAD
        )
        fi
        (cd trusted-firmware-a; git log --oneline -n5)
        detachLicense 3600
        trap "returnLicense || true" EXIT
        tf-a-ci-scripts/eclair/analyze_delta.sh ${TF_CONFIG}
        returnLicense
        tf-a-ci-scripts/eclair/post_gerrit_comment.sh
    publishers:
        - archive:
            artifacts: 'ECLAIR*/**, diff_output/**, misra_delta.txt, *issues_html/**, index.html'
            excludes: 'ECLAIR/out/.data/**'
            latest-only: false
            allow-empty: true
        - email:
            recipients: 'paul.sokolovsky@linaro.org'