- job:
    name: tf-a-static-tfa-next
    node: docker-amd64-tf-a-jammy
    project-type: freestyle
    concurrent: true
    disabled: false
    defaults: global
    description: Run formatting, static checks and lints
    properties:
        - build-discarder:
            days-to-keep: 14
    parameters:
        - string:
            name: TF_GERRIT_PROJECT
            default: 'TF-A/trusted-firmware-a'
        - string:
            name: TF_GERRIT_BRANCH
            default: 'refs/heads/tfa-next'
        - string:
            name: TF_GERRIT_REFSPEC
            default: '+refs/heads/tfa-next:refs/remotes/origin/tfa-next'
        - string:
            name: TFTF_GERRIT_PROJECT
            default: 'TF-A/tf-a-tests'
        - string:
            name: TFTF_GERRIT_BRANCH
            default: 'refs/heads/master'
        - string:
            name: TFTF_GERRIT_REFSPEC
            default: '+refs/heads/master:refs/remotes/origin/master'
        - string:
            name: CI_REFSPEC
            default: '+refs/heads/tfa-next:refs/remotes/origin/tfa-next'
        - string:
            name: JOBS_REFSPEC
            default: 'refs/heads/master'
            description: |
              tf-a-job-configs refspec to use. The master branch is used by default.
        - string:
            name: GERRIT_BRANCH
            default: ''
        - string:
            name: SHARE_FOLDER
            default: '/srv/shared/${JOB_NAME}/${BUILD_NUMBER}'
            description: 'Folder containing shared repositories for downstream pipeline jobs'
    wrappers:
        - credentials-binding:
            - ssh-user-private-key:
                credential-id: TFA_CI_BOT_USER_SSH_KEY
                key-file-variable: CI_BOT_KEY
                username-variable: CI_BOT_USERNAME
                passphrase-variable: ''
        - timestamps
        - timeout:
            timeout: 240
            fail: true
    builders:
    - shell:
        !include-raw: scripts/clone.sh
    - shell: |
       #!/bin/bash
       set -e
       cat << EOF > env.param
       QA_SERVER_PROJECT=${JOB_NAME}
       QA_SERVER_VERSION=${BUILD_NUMBER}
       GERRIT_PROJECT=${TF_GERRIT_PROJECT}
       GERRIT_BRANCH=${TF_GERRIT_BRANCH}
       GERRIT_REFSPEC=${TF_GERRIT_REFSPEC}
       EOF
       cd ${WORKSPACE}/trusted-firmware-a
       # Executed project-related static checks: copyright, unix line endings,
       # formatting and lints
       IS_CONTINUOUS_INTEGRATION=1 ${WORKSPACE}/tf-a-ci-scripts/script/next-checks/next-checks.sh
    publishers:
        - archive:
            artifacts: 'trusted-firmware-a/next-checks.log'
        # TODO: it is not possible to give this groovy script the
        #       auth/permissions required to access next-checks.log
        #       uncomment this once the job is made public
        # - groovy-postbuild:
        #     script:
        #         !include-raw:
        #           - tf-a-static-tfa-next/postbuild.groovy