---
image: archlinux:latest

stages:
  - test

lint:
  stage: test
  needs: []
  before_script:
    - pacman -Syu --needed --noconfirm make flake8 mypy python-black python-isort
  script:
    - make lint
  only:
    changes:
      - keyringctl
      - libkeyringctl/*
      - tests/*
      - .gitlab-ci.yml
      - Makefile

test:
  stage: test
  needs: []
  before_script:
    - pacman -Syu --needed --noconfirm make python sequoia-sq python-coverage python-pytest python-tomli
  script:
    - make test
  only:
    changes:
      - keyringctl
      - libkeyringctl/*
      - tests/*
      - .gitlab-ci.yml
      - Makefile
  artifacts:
    when: always
    reports:
      junit: build/junit-report.xml
      cobertura: build/coverage.xml

build_install:
  stage: test
  needs: []
  before_script:
    - pacman -Syu --needed --noconfirm make python sequoia-sq
  script:
    - ./keyringctl import --main master master-revoked
    - ./keyringctl import packager packager-revoked
    - make
    - make install PREFIX=/usr
    - pacman-key --init
    - pacman-key --populate archlinux
    - pacman-key --updatedb
    - pacman -Syu

keyring_check:
  stage: test
  needs: []
  before_script:
    - pacman -Syu --needed --noconfirm make python sequoia-sq
  script:
    - ./keyringctl import --main master master-revoked
    - ./keyringctl import packager packager-revoked
    - ./keyringctl check
  only:
    changes:
      - keyring
      - keyringctl
      - libkeyringctl/*
      - tests/*
      - .gitlab-ci.yml
      - Makefile