CI Integration with Raven Platform

stages:
  - test
  - build
  - deploy
  - release
variables:
  RAVEN_CI_IMAGE: "releases.cloud.raven.io/raven-public/ravenci"
  RAVEN_CI_TAG: "latest"
docker-image:
  stage: build
  image: docker:latest
  services:
    - docker:dind
  dependencies:
    - raven-ci
  script:
    - docker buildx create --use
    - docker buildx build -t ${DOCKER_IMAGE_NAME}:${DOCKER_TAG} --load -f ./Dockerfile . 
    - printenv | grep CI | sort > cienv
    - docker run --rm -v /var/run/docker.sock:/var/run/docker.sock --entrypoint /bin/sh --env-file=./cienv -e RAVEN_TOKEN=$RAVEN_TOKEN ${ECR_REPOSITORY}/ravenci -c 'DOCKER_HOST="" ravenci scan --images-from="1h" --max-images=10 --pretty'
    - docker push ${DOCKER_IMAGE_NAME}:${DOCKER_TAG}

stage('Building Image') {
  environment {
      DOCKER_REPO = ''
      DOCKER_IMAGE = ''
      DOCKER_TAG = ''
      RAVEN_CI_IMAGE = 'releases.cloud.raven.io/raven-public/ravenci'
      RAVEN_CI_TAG = 'latest'                   // Replace with specific Raven CI tag if required
  }
  steps {
      script {
          // Log in to Docker registry
          sh '''
              echo $DOCKER_PASSWORD | docker login -u $DOCKER_USERNAME --password-stdin $DOCKER_REPO
          '''

          // Build and push the Docker image
          sh '''
              docker buildx build --platform linux/amd64 --load \
                  -t $DOCKER_REPO/$DOCKER_IMAGE:$DOCKER_TAG \
                  -f Dockerfile .
              docker push $DOCKER_REPO/$DOCKER_IMAGE:$DOCKER_TAG
          '''
      }
  }
  post {
      always {
          withCredentials([string(credentialsId: 'RAVEN_TOKEN', variable: 'RAVEN_TOKEN')]) {
              script {
                  // Use the Raven CI image with docker.image()
                  docker.image("${RAVEN_CI_IMAGE}:${RAVEN_CI_TAG}").inside("-v /var/run/docker.sock:/var/run/docker.sock --entrypoint=''") {
                      sh '''
                          /bin/sh -c '
                              DOCKER_HOST="" ravenci scan --images-from="1h" --max-images=10 --pretty
                          '
                      '''
                  }
              }
          }
      }
  }
}

name: Build and Push Docker Image

on:
  push:
    branches:
      - main  # Specify the branch to trigger this workflow

jobs:
  docker-image:
    name: Build and Push Docker Image
    runs-on: ubuntu-latest
    container:
      image: docker:latest
    services:
      docker:
        image: docker:dind
        options: --privileged
    env:
      RAVEN_CI_IMAGE: "releases.cloud.raven.io/raven-public/ravenci"
      RAVEN_CI_TAG: "latest"
      DOCKER_IMAGE_NAME: ${{ secrets.DOCKER_IMAGE_NAME }}
      DOCKER_TAG: ${{ secrets.DOCKER_TAG }}
      RAVEN_TOKEN: ${{ secrets.RAVEN_TOKEN }}
      ECR_REPOSITORY: ${{ secrets.ECR_REPOSITORY }}
    steps:
      - name: Checkout Code
        uses: actions/checkout@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
        with:
          install: true

      - name: Build Docker Image
        run: |
          docker buildx build -t ${DOCKER_IMAGE_NAME}:${DOCKER_TAG} --load -f ./Dockerfile .

      - name: Prepare Environment Variables File
        run: printenv | grep GITHUB | sort > cienv

      - name: Scan Docker Images
        run: |
          docker run --rm -v /var/run/docker.sock:/var/run/docker.sock --entrypoint /bin/sh --env-file=./cienv -e RAVEN_TOKEN=$RAVEN_TOKEN ${ECR_REPOSITORY}/ravenci -c 'DOCKER_HOST="" ravenci scan --images-from="1h" --max-images=10 --pretty'

      - name: Push Docker Image
        run: docker push ${DOCKER_IMAGE_NAME}:${DOCKER_TAG}

image: docker:latest

pipelines:
  default:
    - step:
        name: Build and Push Docker Image
        services:
          - docker
        caches:
          - docker
        script:
          - docker buildx create --use
          - docker buildx build -t ${DOCKER_IMAGE_NAME}:${DOCKER_TAG} --load -f ./Dockerfile .
          - printenv | grep BITBUCKET | sort > cienv
          - docker run --rm -v /var/run/docker.sock:/var/run/docker.sock --entrypoint /bin/sh --env-file=./cienv -e RAVEN_TOKEN=$RAVEN_TOKEN ${ECR_REPOSITORY}/ravenci -c 'DOCKER_HOST="" ravenci scan --images-from="1h" --max-images=10 --pretty'
          - docker push ${DOCKER_IMAGE_NAME}:${DOCKER_TAG}