Jenkinsfile

pipeline {
    agent any

    environment {
        JDK_TOOL_NAME = 'JDK 21'
        MAVEN_TOOL_NAME = 'Maven 3.9.9'
    }

    options {
        skipStagesAfterUnstable()
        disableConcurrentBuilds abortPrevious: true
    }

    stages {
        stage('Clean') {
            steps {
                withMaven(jdk: env.JDK_TOOL_NAME, maven: env.MAVEN_TOOL_NAME) {
                    sh 'mvn clean'
                }
            }
        }
        stage('Format Check') {
            options {
                timeout(activity: true, time: 60, unit: 'SECONDS')
            }
            steps {
                withMaven(jdk: env.JDK_TOOL_NAME, maven: env.MAVEN_TOOL_NAME) {
                    sh 'mvn spotless:check'
                }
            }
        }
        stage('Build') {
            options {
                timeout(activity: true, time: 120, unit: 'SECONDS')
            }
            steps {
                withMaven(jdk: env.JDK_TOOL_NAME, maven: env.MAVEN_TOOL_NAME) {
                    sh 'mvn -DskipTests=true package'
                }
            }

            post {
                success {
                    archiveArtifacts artifacts: '**/target/*.jar'
                }
            }
        }
        stage('Code Analysis') {
            when {
                anyOf {
                    branch 'main'
                    tag 'v*'
                    changeRequest()
                }
            }
            options {
                timeout(activity: true, time: 240, unit: 'SECONDS')
            }
            steps {
                withMaven(jdk: env.JDK_TOOL_NAME, maven: env.MAVEN_TOOL_NAME) {
                    // `package` goal is required here to load modules in reactor and avoid dependency resolve conflicts
                    sh 'mvn -DskipTests=true package pmd:pmd pmd:cpd spotbugs:spotbugs'
                }
            }
            post {
                always {
                    recordIssues enabledForFailure: true, tools: [spotBugs(), cpd(pattern: '**/target/cpd.xml'), pmdParser(pattern: '**/target/pmd.xml')]
                }
            }
        }
        stage('Unit Tests') {
            when {
                anyOf {
                    branch 'main'
                    tag 'v*'
                    changeRequest()
                }
            }
            options {
                timeout(activity: true, time: 180, unit: 'SECONDS')
            }
            steps {
                withMaven(jdk: env.JDK_TOOL_NAME, maven: env.MAVEN_TOOL_NAME) {
                    sh 'mvn -P coverage -Dskip.failsafe.tests=true test'
                }
            }
            post {
                always {
                    junit testResults: '**/target/surefire-reports/TEST-*.xml'
                }
            }
        }
        stage('Integration Tests') {
            when {
                anyOf {
                    branch 'main'
                    tag 'v*'
                    changeRequest()
                }
            }
            options {
                timeout(activity: true, time: 600, unit: 'SECONDS')
            }
            steps {
                withMaven(jdk: env.JDK_TOOL_NAME, maven: env.MAVEN_TOOL_NAME) {
                    sh 'mvn -P coverage -Dskip.surefire.tests=true verify'
                }
            }
            post {
                always {
                    junit testResults: '**/target/failsafe-reports/TEST-*.xml', allowEmptyResults: true
                }
                success {
                    discoverReferenceBuild()
                    recordCoverage(tools: [[ parser: 'JACOCO' ]],
                            id: 'jacoco', name: 'JaCoCo Coverage',
                            sourceCodeRetention: 'LAST_BUILD')
                }
            }
        }
        stage('Deploy to Internal Nexus Repository') {
            when {
                anyOf {
                    branch 'main'
                    tag 'v*'
                }
            }
            steps {
                withMaven(jdk: env.JDK_TOOL_NAME, maven: env.MAVEN_TOOL_NAME) {
                    // Tests were already executed separately, so disable tests within this step
                    sh 'mvn -DskipTests=true deploy'
                }
            }
        }
        stage('Make Github Release') {
            when {
                tag 'v*'
            }
            steps {
                writeFile file: 'release_description.md', text: 'A new version of TLS-Scanner was released. You can download the artifacts (executable .jar) below. \n\n## Changelog:\n  - TODO'
                sh "zip -r TLS-Scanner-${TAG_NAME}.zip apps"
                script {
                    def draftRelease = createGitHubRelease(
                        credentialId: '1522a497-e78a-47ee-aac5-70f071fa6714',
                        repository: GIT_URL.tokenize("/.")[-3,-2].join("/"),
                        draft: true,
                        tag: TAG_NAME,
                        name: TAG_NAME,
                        bodyFile: 'release_description.md',
                        commitish: GIT_COMMIT)
                    uploadGithubReleaseAsset(
                        credentialId: '1522a497-e78a-47ee-aac5-70f071fa6714',
                        repository: GIT_URL.tokenize("/.")[-3,-2].join("/"),
                        tagName: draftRelease.htmlUrl.tokenize("/")[-1],
                        uploadAssets: [
                            [filePath: "${env.WORKSPACE}/TLS-Scanner-${TAG_NAME}.zip"]
                        ]
                    )
                }
            }
        }
        stage('Public Docker Images') {
            when {
                tag 'v*'
                environment name: 'GIT_URL', value: 'https://github.com/tls-attacker/TLS-Scanner.git'
            }
            steps {
                script {
                    docker.withRegistry('https://ghcr.io','github-docker-token') {
                        def image = docker.build("ghcr.io/tls-attacker/tlsscanner:${TAG_NAME}", "-f Dockerfile_Jenkins .")
                        image.push()
                        image.push('latest')
                    }
                }
            }
        }
        stage('Internal Docker Images') {
                    when {
                        tag 'v*'
                        environment name: 'GIT_URL', value: 'https://github.com/tls-attacker/TLS-Scanner-Development.git'
                    }
                    steps {
                        script {
                            docker.withRegistry('https://hydrogen.cloud.nds.rub.de','Jenkins-User-Nexus-Repository') {
                                def image = docker.build("hydrogen.cloud.nds.rub.de/tls-attacker/tlsscanner:${TAG_NAME}", "-f Dockerfile_Jenkins .")
                                image.push()
                                image.push('latest')
                            }
                        }
                    }
                }
    }
    post {
        always {
            recordIssues enabledForFailure: true, tools: [mavenConsole(), java(), javaDoc()]
        }
    }
}