mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Abandon the pre-receive hook

Browse source 
I wanted Gitea to call Buildkite's pre-receive pipeline and either accept or
reject the incoming code depending on the outcome. The problem is that I can
only *create* builds from Gitea's pre-receive hook.

Now I'm left with two options:
1. run the lint-secrets step in post-receive
2. run `/nix/store/<hash>/git-secrets --scan-history $REPO_PATH` in Gitea

As far as I can tell, I cannot define Gitea hooks in Nix, which is unfortunate;
otherwise, option 2 would appeal more.

I'm doing option one for now.
This commit is contained in:
William Carroll 2020-08-22 09:09:15 +01:00
parent 4241339963
commit 7ab86f5423
2 changed files with 6 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ci/pipelines/post-receive.nix
View file

@ -2,10 +2,16 @@
let
pipeline.steps = [
{
key = "lint-secrets";
command = "${pkgs.git-secrets}/bin/git-secrets --scan-history";
label = ":broom: lint secrets";
}
{
key = "build-briefcase";
command = "nix-build . -I briefcase=$(pwd) --no-out-link --show-trace";
label = ":nix: build briefcase";
depends_on = "lint-secrets";
}
{
key = "build-socrates";

11
ci/pipelines/pre-receive.nix
View file

@ -1,11 +0,0 @@
{ pkgs, ... }:
let
pipeline.steps = [
{
key = "lint";
command = "${pkgs.git-secrets}/bin/git-secrets --scan-history";
label = ":broom: lint";
}
];
in pkgs.writeText "pipeline.yaml" (builtins.toJSON pipeline)