depends_on:
  - test

when:
  branch:
    exclude:
      - master

pipeline:
  buildNext:
    image: woopeckerci/plugin-docker-buildx
    settings:
      dry_run: true
      repo: ocram85/blog
      dockerfile: Dockerfile
      tags: "next"
      build_args:
        - NODE_BASE=lts-buster-slim
        - NGINX_BASE=1.21.6-alpine
      username:
        from_secret: hub_user
      password:
        from_secret: hub_passwd
    when:
      event:
        - pull_request

  trivy:
    image: aquasec/trivy:0.24.3
    commands:
      - |
        trivy image \
          --severity UNKNOWN,LOW,MEDIUM \
          --no-progress \
          ocram85/blog:next
      - |
        trivy image \
          --exit-code 1 \
          --severity HIGH,CRITICAL \
          --no-progress \
          ocram85/blog:next
    when:
      event:
        - pull_request

  triggerPortainer:
    image: ocram85/portainer-serviceupdate
    settings:
      #VERBOSE: true
      URI: "https://portainer.ocram85.com"
      TOKEN:
        from_secret: NEXT_TOKEN
    when:
      event:
        - pull_request