Add new file

.gitlab-ci.yml

+default:
+  tags:
+    - test # runner 需配置相同tag
+  interruptible: true # 任务可被后来pipeline打断
+
+stages:
+  - upload-mr-analysis
+  - schedule-analyze-stage
+
+workflow:
+  rules:
+    - if: $CI_MERGE_REQUEST_IID
+    - if: $CI_PIPELINE_SOURCE == "schedule"
+
+variables:
+  MERGE_REQUEST_PARAM: "{mergeRequestId:$CI_MERGE_REQUEST_IID,projectId:$CI_PROJECT_ID,jobId:$CI_JOB_ID}"
+  JAVA_MAIN_SOURCE: "src/main/java"  #  检索差异文件脚本变量，表示只检查main文件，不检查test文件
+  SCANNER_SCRIPT: "/root/analysis-tool/bin/scanner"  #  套件命令执行文件
+  SCANNER_JAVA_LICENSE_PATH: "/root/analysis-tool/Hub-ci-java.txt"  #  JAVA授权文件
+  SCANNER_C_LICENSE_PATH: "/root/analysis-tool/Hub-ci-c.txt"  #  C授权文件
+  # 根据项目进行配置
+  HUB_LOGIN_NAME: "admin"  # 登录名
+  HUB_PASSWORD: "1234qwer"  # 密码
+  HUB_URL: "http://192.168.68.153:9521"  # 平台URL
+  HUB_PROJECT_ID: "9"  # 对应平台项目Id
+  REPOSITORY_FULL_PATH: "/builds/hub-gitlab/root/mall4cloud"  #  项目绝对路径，供套件分析
+  REPOSITORY_NAME: "mall4cloud"  #  项目名称
+  JAVA_SUFFIX: ".java"
+  ANALYSIS_PARAM: "MR_IID:$CI_MERGE_REQUEST_IID,JOB_ID:$CI_JOB_ID,false" # 分析名称 描述 是否为项目分析
+  ANALYSIS_PARAM_SCHEDULE: "定时项目分析,任务ID:$CI_JOB_ID,true" # 分析名称 描述 是否为项目分析
+
+
+upload-job:
+  stage: upload-mr-analysis
+  # 包含分析工具运行所需环境
+  # 需要设置 runner config: pull_policy = "if-not-present"
+  # 使用本地镜像，本地需要有这个镜像
+  # 需要设置 runner config：mac_address（固定IP 工具授权需要）
+  image: docker.ustchcs.com/ubuntu-javacli-quality:v3.0
+  allow_failure: false
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+  before_script:
+    # 授权
+    - locale-gen zh_CN
+    - export LANG=zh_CN.UTF-8
+    - export LC_ALL=zh_CN.UTF-8
+    - export LANGUAGE=zh_CN.UTF-8
+    - $SCANNER_SCRIPT authorize -n cafehunter $SCANNER_JAVA_LICENSE_PATH
+    # - $SCANNER_SCRIPT authorize -n seahunter $SCANNER_C_LICENSE_PATH
+    # 将游离分支转换为正常分支 以供套件分析
+    - cd $REPOSITORY_FULL_PATH
+    - git fetch
+    - git branch tmp-$CI_JOB_ID-$CI_JOB_NAME $CI_COMMIT_SHA
+    - git checkout -b $CI_COMMIT_REF_NAME
+    - git merge tmp-$CI_JOB_ID-$CI_JOB_NAME
+    # 获取分析文件
+    - chmod 777 $REPOSITORY_FULL_PATH/getCommittedFiles.sh
+    - export COMMITTED_FILES=$($REPOSITORY_FULL_PATH/getCommittedFiles.sh)
+  script:
+    #  分析
+    - echo "SCANNER_SCRIPT scan $COMMITTED_FILES -umr $REPOSITORY_NAME $HUB_LOGIN_NAME $HUB_PASSWORD $HUB_URL $HUB_PROJECT_ID $ANALYSIS_PARAM $MERGE_REQUEST_PARAM"
+    - $SCANNER_SCRIPT scan $COMMITTED_FILES -umr $REPOSITORY_NAME $HUB_LOGIN_NAME $HUB_PASSWORD $HUB_URL $HUB_PROJECT_ID $ANALYSIS_PARAM $MERGE_REQUEST_PARAM
+    # 删除过程中用到的分支
+    - "git branch -d tmp-$CI_JOB_ID-$CI_JOB_NAME"
+    - "git checkout $CI_COMMIT_SHA"
+    - "git branch -D $CI_COMMIT_REF_NAME"
+  after_script:
+    - "git branch -d tmp-$CI_JOB_ID-$CI_JOB_NAME"
+    - "git checkout $CI_COMMIT_SHA"
+    - "git branch -D $CI_COMMIT_REF_NAME"
+
+schedule-analyze:
+  stage: schedule-analyze-stage
+  image: docker.ustchcs.com/ubuntu-javacli-quality:v3.0
+  allow_failure: false
+  only:
+    - schedules
+  before_script:
+    - locale-gen zh_CN
+    - export LANG=zh_CN.UTF-8
+    - export LC_ALL=zh_CN.UTF-8
+    - export LANGUAGE=zh_CN.UTF-8
+    - $SCANNER_SCRIPT authorize -n cafehunter $SCANNER_JAVA_LICENSE_PATH
+    - "cd $REPOSITORY_FULL_PATH"
+    - "git fetch"
+    - "git checkout develop"
+    - "locale-gen zh_CN"
+    - "export LANG=zh_CN.UTF-8"
+    - "export LC_ALL=zh_CN.UTF-8"
+    - "export LANGUAGE=zh_CN.UTF-8"
+  script:
+    - echo 'cafehunter-cli install complete.'
+    - echo "$SCANNER_SCRIPT scan $REPOSITORY_FULL_PATH/hutool-aop -u $REPOSITORY_NAME $HUB_LOGIN_NAME $HUB_PASSWORD $HUB_URL $HUB_PROJECT_ID $ANALYSIS_PARAM_SCHEDULE"
+    - "$SCANNER_SCRIPT scan $REPOSITORY_FULL_PATH/hutool-aop -u $REPOSITORY_NAME $HUB_LOGIN_NAME $HUB_PASSWORD $HUB_URL $HUB_PROJECT_ID $ANALYSIS_PARAM_SCHEDULE"