status-im
/
status-react
mirror of https://github.com/status-im/status-react.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
status-react/ci/README.md

17 lines
439 B
Markdown
Raw Permalink Normal View History

use status-react-jenkins as CI library This PR extracts all the ci/*.groovy scripts into a separate private repo located at: https://github.com/status-im/status-react-jenkins The main reasons for a separate repo are: * Hiding the internal details of our CI setup * Hiding names of Jenkins credentials available in CI jobs * Lowering attack surface for malicious external contributors * Increasing focus on PRs related to CI setup You can read more about how Jenkins pipeline shared libraries work here: https://jenkins.io/doc/book/pipeline/shared-libraries/ In simple terms I've added the repo to the main Jenkins configuration in "Global Pipeline Libraries" section and load it using: library 'status-react-jenkins@master' Which makes globally available all of the libraries defined in the `vars` directory of that repo. This also eliminates the need for statements like `android = load 'ci/android.groovy'`. Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-03-06 15:43:04 +00:00
# Description
This folder contains files defininf [Jenkins pipelines](https://jenkins.io/doc/book/pipeline/) that run on https://ci.status.im/.
# Libraries
All `Jenkinsfile`s contain the following line:
```groovy
ci: upgrade jenkins lib to 1.2.12 to generalize GH release This is required to also ad GitHub releases to `status-desktop`. Also renamed `status-react-jenkins` to `status-jenkins-lib` for clarity. Depends on: https://github.com/status-im/status-react-jenkins/pull/23 Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-04-15 09:12:21 +00:00
library 'status-jenkins-lib@master'
use status-react-jenkins as CI library This PR extracts all the ci/*.groovy scripts into a separate private repo located at: https://github.com/status-im/status-react-jenkins The main reasons for a separate repo are: * Hiding the internal details of our CI setup * Hiding names of Jenkins credentials available in CI jobs * Lowering attack surface for malicious external contributors * Increasing focus on PRs related to CI setup You can read more about how Jenkins pipeline shared libraries work here: https://jenkins.io/doc/book/pipeline/shared-libraries/ In simple terms I've added the repo to the main Jenkins configuration in "Global Pipeline Libraries" section and load it using: library 'status-react-jenkins@master' Which makes globally available all of the libraries defined in the `vars` directory of that repo. This also eliminates the need for statements like `android = load 'ci/android.groovy'`. Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-03-06 15:43:04 +00:00
```
Which loads the used methods - like `nix.shell()` - from a separate private repo:
ci: upgrade jenkins lib to 1.2.12 to generalize GH release This is required to also ad GitHub releases to `status-desktop`. Also renamed `status-react-jenkins` to `status-jenkins-lib` for clarity. Depends on: https://github.com/status-im/status-react-jenkins/pull/23 Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-04-15 09:12:21 +00:00
https://github.com/status-im/status-jenkins-lib
use status-react-jenkins as CI library This PR extracts all the ci/*.groovy scripts into a separate private repo located at: https://github.com/status-im/status-react-jenkins The main reasons for a separate repo are: * Hiding the internal details of our CI setup * Hiding names of Jenkins credentials available in CI jobs * Lowering attack surface for malicious external contributors * Increasing focus on PRs related to CI setup You can read more about how Jenkins pipeline shared libraries work here: https://jenkins.io/doc/book/pipeline/shared-libraries/ In simple terms I've added the repo to the main Jenkins configuration in "Global Pipeline Libraries" section and load it using: library 'status-react-jenkins@master' Which makes globally available all of the libraries defined in the `vars` directory of that repo. This also eliminates the need for statements like `android = load 'ci/android.groovy'`. Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-03-06 15:43:04 +00:00
This is done to improve security of our CI setup.