---
kind: pipeline
type: docker
name: default
steps:
  - name: run gitleaks
    image: plugins/gitleaks
    settings:
      path: .

  - name: hadolint
    image: hadolint/hadolint:latest-debian
    commands:
      - hadolint --version
      - hadolint  Dockerfile

  - name: docker_build_and_push
    image: plugins/docker
    settings:
      username:
        from_secret: DOCKERHUB_USER
      password:
        from_secret: DOCKERHUB_PASS
      dockerfile: Dockerfile
      repo: quotengrote/fpm
      tags:
        - latest
        - ${DRONE_COMMIT_SHA:0:8}
        - ${DRONE_COMMIT_BRANCH}
    when:
      branch:
        - main
      event:
        exclude:
          - pull_request