image: $CI_REGISTRY/service-web-lab/ldc-web-images-docker/ldcweb-qa:php7.3-1.0

stages:
    - Security
    - CodingStandards

composer-security:
    stage: Security
    script:
        - local-php-security-checker --format=json --path=./composer.lock > composer-security-checker-report.json
    artifacts:
        when: on_failure
        expose_as: 'composer-security-checker'
        paths:
          - composer-security-checker-report.json
    allow_failure: true

npm-security:
    stage: Security
    script:
        - audit-ci -p npm -o json > npm-security-checker-report.json
    artifacts:
        when: on_failure
        expose_as: 'npm-security-checker'
        paths:
          - npm-security-checker-report.json
    allow_failure: true

phpcs:
    stage: CodingStandards
    before_script:
    - composer config gitlab-token.gitlab.com $CI_DEPLOY_USER $CI_DEPLOY_PASSWORD
    - composer install
    cache:
        paths:
            - vendor/
    script:
        - vendor/bin/phpcs --report=junit --report-file=phpcs-report.xml
    artifacts:
      when: on_failure
      expose_as: 'phpcs'
      paths:
          - phpcs-report.xml
      reports:
        junit: phpcs-report.xml
    allow_failure: false