tf-a-eclair-delta.yaml

- job:
    name: tf-a-eclair-delta
    node: docker-tf-a-eclair-3.13
    project-type: freestyle
    concurrent: true
    disabled: false
    defaults: global
    description: |
      ECLAIR (MISRA compliance) testing of TF-A patches
    properties:
        - build-discarder:
            days-to-keep: 45
            num-to-keep: 200
            artifact-num-to-keep: 80
    parameters:
        - string:
            name: TF_CONFIG_LIST
            default: >
              fvp-tbb-mbedtls-rme-romlib
              fvp-spm-spmd-lsp
              fvp-pauth-bti-sdei
              fvp-aarch32-roxlattables
        - string:
            name: MAKE_TARGET
            default: ''
            description: |
              TF-A make target
        - string:
            name: MAKE_JOBS
            default: '16'
            description: |
              --jobs to pass to make, etc.
        - string:
            name: DEBUG
            default: '1'
            description: |
              TF-A make DEBUG setting
        - string:
            name: GERRIT_HOST
            default: 'review.trustedfirmware.org'
        - string:
            name: GERRIT_PROJECT
            default: 'TF-A/trusted-firmware-a'
            description: |
              Git project to build (also set by Gerrit trigger)
        - string:
            name: GERRIT_BRANCH
            default: 'integration'
            description: |
              Git branch to build (also set by Gerrit trigger)
        - string:
            name: GERRIT_REFSPEC
            default: ''
        - string:
            name: GERRIT_CHANGE_NUMBER
            default: ''
        - string:
            name: GERRIT_PATCHSET_NUMBER
            default: ''
        - string:
            name: MBEDTLS_URL
            default: 'https://github.com/Mbed-TLS/mbedtls/archive/mbedtls-3.6.3.tar.gz'
            description: |
              URL of mbedTLS library to use in build (only for some configurations)
        - string:
            name: SHARE_FOLDER
            default: '/srv/shared/${JOB_NAME}/${BUILD_NUMBER}'
            description: 'Folder containing shared repositories for downstream pipeline jobs'
    triggers:
    - gerrit:
        silent: true
        server-name: 'review.trustedfirmware.org'
        projects:
        - branches:
          - branch-compare-type: PLAIN
            branch-pattern: openci-migration
          project-compare-type: PLAIN
          project-pattern: 'next/TF-A/trusted-firmware-a'
        - branches:
          - branch-compare-type: PLAIN
            branch-pattern: integration
          project-compare-type: PLAIN
          project-pattern: 'sandbox/pfalcon/trusted-firmware-a'
        trigger-on:
        - comment-added-event:
            approval-category: "Allow-CI"
            approval-value: 1
        - comment-added-event:
            approval-category: "Allow-CI"
            approval-value: 2
    wrappers:
    - timestamps
    - timeout:
        timeout: 330
        fail: true
    - credentials-binding:
      - ssh-user-private-key:
          credential-id: TFA_CI_BOT_USER_SSH_KEY
          key-file-variable: CI_BOT_KEY
          username-variable: CI_BOT_USERNAME
          passphrase-variable: ''
    builders:
    - shell: |
        #!/bin/bash
        set -ex
        export PATH=~/.local/bin:$PATH
        pwd
        env | grep GERRIT
        git clone https://git.trustedfirmware.org/ci/tf-a-ci-scripts.git
        git clone https://git.trustedfirmware.org/ci/tf-ci-scripts.git

        git clone https://${GERRIT_HOST}/${GERRIT_PROJECT} -b ${GERRIT_BRANCH}
        if [ -n "${GERRIT_REFSPEC}" ]; then
        (
            cd $(basename ${GERRIT_PROJECT})
            git fetch https://${GERRIT_HOST}/${GERRIT_PROJECT} ${GERRIT_REFSPEC} && git checkout FETCH_HEAD
        )
        fi
        (cd trusted-firmware-a; git log --oneline -n5)

        export ECLAIR_CONFIG_DIR=$PWD/tf-a-ci-scripts/eclair
        . tf-ci-scripts/eclair/utils.sh
        # TODO
        #. tf-a-ci-scripts/eclair/utils_tfa.sh

        . tf-a-ci-scripts/eclair/eclair_vars.sh

        detachLicense 600
        trap "returnLicense || true" EXIT

        export ECLAIR_ANALYSIS=ECLAIR
        eclair_prepare
        eclair_analyze tf-a-ci-scripts/eclair/build-tfa-multiple.sh
        eclair_make_ecd
        eclair_make_reports

        echo "========= Building base revision ========="

        (
            cd $(basename ${GERRIT_PROJECT})
            git checkout HEAD^
            git log --oneline -n5
        )

        export ECLAIR_ANALYSIS=ECLAIR_BASE
        eclair_prepare
        eclair_analyze tf-a-ci-scripts/eclair/build-tfa-multiple.sh
        eclair_make_ecd
        eclair_make_reports

        eclair_make_delta_report ECLAIR_BASE ECLAIR
        tf-ci-scripts/eclair/eclair_diff_report.py diff_output > misra_delta.txt

        returnLicense
        tf-ci-scripts/eclair/analyze_delta_index_html.sh
        tf-ci-scripts/eclair/post_gerrit_comment.sh
    publishers:
        - archive:
            artifacts: 'ECLAIR*/**, diff_output/**, misra_delta.txt, *issues_html/**, index.html'
            excludes: 'ECLAIR/out/.data/**'
            latest-only: false
            allow-empty: true