tf-m-release-static.yaml

#-------------------------------------------------------------------------------
# Copyright (c) 2020-2022, Arm Limited. All rights reserved.
#
# SPDX-License-Identifier: BSD-3-Clause
#
#-------------------------------------------------------------------------------

- job:
    name: tf-m-release-static
    description: 'Triggers static checks on Gerrit trigger, then triggers build job after.'
    project-type: pipeline
    disabled: false
    sandbox: true
    concurrent: true
    properties:
      - build-discarder:
          days-to-keep: 15
          num-to-keep: 45
      - authorization:
          !include: authorization.yaml.inc
    parameters:
      - string:
          name: 'CODE_REPO'
          default: 'https://review.trustedfirmware.org/TF-M/trusted-firmware-m'
      - string:
          name: 'CI_SCRIPTS_REPO'
          default: 'https://git.trustedfirmware.org/ci/tf-m-ci-scripts'
      - string:
          name: 'CI_SCRIPTS_BRANCH'
          default: 'release/1.6.x'
      - string:
          name: 'GERRIT_REFSPEC'
          default: 'refs/heads/release/1.6.x'
          description: |
            For use when triggering with unmerged Gerrit changes.
      - string:
          name: 'GERRIT_BRANCH'
          default: 'release/1.6.x'
          description: |
            For use when triggering with unmerged Gerrit changes.
      - string:
          name: 'GERRIT_HOST'
          description: |
            For use when triggering with unmerged Gerrit changes.
      - string:
          name: 'GERRIT_CHANGE_NUMBER'
          description: |
            For use when triggering with unmerged Gerrit changes.
      - string:
          name: 'GERRIT_PATCHSET_REVISION'
          description: |
            For use when triggering with unmerged Gerrit changes.
      - string:
          name: 'MCUBOOT_REFSPEC'
          default: 'v1.9.0'
          description: |
            Specify which MCUboot version to use
            refs/heads/master    : Pick up latest master
            refs/tags/<TAG_NAME> : Pick up a tagged version
      - string:
          name: 'MCUBOOT_URL'
          default: 'https://git.trustedfirmware.org/mirror/mcuboot.git'
      - string:
          name: 'MBEDTLS_VERSION'
          default: 'mbedtls-3.1.0'
      - string:
          name: 'MBEDTLS_URL'
          default: 'https://git.trustedfirmware.org/mirror/mbed-tls.git'
      - string:
          name: 'TFM_TESTS_URL'
          default: 'https://git.trustedfirmware.org/TF-M/tf-m-tests.git'
      - string:
          name: 'TFM_TESTS_REFSPEC'
          default: 'refs/heads/release/1.6.x'
      - string:
          name: 'PSA_ARCH_TESTS_URL'
          default: 'https://git.trustedfirmware.org/mirror/psa-arch-tests.git'
      - string:
          name: 'PSA_ARCH_TESTS_VERSION'
          default: 'f7e8495dede62196a7fdd88470c58cf672525238'
      - string:
          name: SHARE_FOLDER
          default: '/srv/shared/${JOB_NAME}/${BUILD_NUMBER}'
          description: 'Folder containing shared repositories for downstream pipeline jobs'
    triggers:
      - gerrit:
          trigger-on:
            - comment-added-event:
                approval-category: 'Allow-CI'
                approval-value: '1'
          projects:
              - project-compare-type: 'PLAIN'
                project-pattern: 'TF-M/trusted-firmware-m'
                branches:
                  - branch-compare-type: 'PLAIN'
                    branch-pattern: 'release/1.6.x'
          override-votes: true
          gerrit-build-successful-verified-value: 1
          gerrit-build-failed-verified-value: -1
          gerrit-build-unstable-verified-value: -1
          gerrit-build-successful-codereview-value: 0
          gerrit-build-failed-codereview-value: 0
          gerrit-build-unstable-codereview-value: 0
          notification-level: 'OWNER_REVIEWERS'
          custom-url: $RUN_DISPLAY_URL
    wrappers:
        - timestamps
    pipeline-scm:
      scm:
        - git:
            url: '$CI_SCRIPTS_REPO'
            branches:
            - '$CI_SCRIPTS_BRANCH'
            credentials-id: GIT_SSH_KEY
            wipe-workspace: false
      script-path: jenkins/static.jpl