version: 1

reporting: checks-v1

policy:

pullRequests: public

tasks:

$let:

head_branch:

$if: 'tasks_for == "github-pull-request"'

then: ${event.pull_request.head.ref}

else:

$if: 'tasks_for == "github-push"'

then:

# Strip ref branch prefix

$if: 'event.ref[0:11] == "refs/heads/"'

then: ${event.ref[11:]}

else: ${event.ref}

else: ${event.release.target_commitish}

head_rev:

$if: 'tasks_for == "github-pull-request"'

then: ${event.pull_request.head.sha}

else:

$if: 'tasks_for == "github-push"'

then: ${event.after}

else: ${event.release.tag_name}

repository:

$if: 'tasks_for == "github-pull-request"'

then: ${event.pull_request.head.repo.html_url}

else: ${event.repository.html_url}

channel:

$if: 'tasks_for == "github-push"'

then:

$if: 'event.ref in ["refs/heads/testing", "refs/heads/production"]'

then: ${event.ref[11:]}

else: "dev"

else: "dev"

provisionerId:

$if: 'taskcluster_root_url == "https://firefox-ci-tc.services.mozilla.com"'

then:

$if: 'tasks_for == "github-push"'

then: "code-analysis-3"

else: "code-analysis-1"

else: proj-relman

workerType:

$if: 'taskcluster_root_url == "https://firefox-ci-tc.services.mozilla.com"'

then: linux-gw-gcp

else: generic-worker-ubuntu-24-04

taskboot_image: "mozilla/taskboot:0.4.1"

python_image: "python:3.12"

in:

$if: '(tasks_for == "github-push" && (head_branch == "master" || head_branch == "production" || head_branch == "testing")) || (tasks_for == "github-pull-request" && event["action"] in ["opened", "reopened", "synchronize"])'

then:

$flatten:

$match:

# Always run those tasks

"true":

- taskId: { $eval: as_slugid("check_lint") }

provisionerId: "${provisionerId}"

workerType: "${workerType}"

created: { $fromNow: "" }

deadline: { $fromNow: "1 hour" }

payload:

maxRunTime: 3600

image: "${python_image}"

command:

- sh

- -lxce

- "git clone --quiet ${repository} /src && cd /src && git checkout ${head_rev} -b checks &&

cd /src/bot && pip install --disable-pip-version-check --no-cache-dir --quiet -r requirements-dev.txt &&

cd /src && pre-commit run -a --show-diff-on-failure"

metadata:

name: "Code Coverage checks: linting"

description: Check code style with pre-commit hooks

owner: bastien@mozilla.com

source: https://github.com/mozilla/code-coverage

# Run only on firefoxci Taskcluster

'taskcluster_root_url == "https://firefox-ci-tc.services.mozilla.com"':

- taskId: { $eval: as_slugid("bot_check_tests") }

provisionerId: "${provisionerId}"

workerType: "${workerType}"

created: { $fromNow: "" }

deadline: { $fromNow: "1 hour" }

payload:

maxRunTime: 3600

image: "${python_image}"

command:

- sh

- -lxce

- "git clone --quiet ${repository} /src && cd /src && git checkout ${head_rev} -b checks &&

/src/bot/ci/bootstrap.sh &&

cd /src/bot && pip3 install --disable-pip-version-check --no-cache-dir --quiet . && pip3 install --disable-pip-version-check --no-cache-dir --quiet -r requirements-dev.txt &&

pytest -v"

metadata:

name: "Code Coverage Bot checks: unit tests"

description: Check python code with pytest

owner: bastien@mozilla.com

source: https://github.com/mozilla/code-coverage

- taskId: { $eval: as_slugid("bot_build") }

created: { $fromNow: "" }

deadline: { $fromNow: "1 hour" }

expires: { $fromNow: "2 years" }

provisionerId: "${provisionerId}"

workerType: "${workerType}"

dependencies:

- { $eval: as_slugid("check_lint") }

- { $eval: as_slugid("bot_check_tests") }

payload:

maxRunTime: 3600

image: "${taskboot_image}"

env:

GIT_REPOSITORY: ${repository}

GIT_REVISION: ${head_rev}

command:

- taskboot

- build

- --image

- mozilla/code-coverage

- --tag

- "bot-${channel}"

- --tag

- "bot-${head_rev}"

- --write

- /bot.tar

- bot/Dockerfile

artifacts:

public/code-coverage-bot.tar.zst:

expires: { $fromNow: "2 years" }

path: /bot.tar.zst

type: file

routes:

$if: 'tasks_for == "github-pull-request"'

then:

- "index.code-analysis.v2.code-coverage-pr.revision.${head_rev}"

- "index.code-analysis.v2.code-coverage-pr.branch.${head_branch}"

else:

- "index.code-analysis.v2.code-coverage.revision.${head_rev}"

- "index.code-analysis.v2.code-coverage.branch.${head_branch}"

metadata:

name: Code Coverage Bot docker build

description: Build docker image with taskboot

owner: bastien@mozilla.com

source: https://github.com/mozilla/code-coverage

# Run only on community Taskcluster

'taskcluster_root_url == "https://community-tc.services.mozilla.com"':

- $if: 'tasks_for == "github-push" && head_branch[:10] == "refs/tags/"'

then:

$let:

version: { $eval: "head_branch[10:]" }

in:

taskId: { $eval: as_slugid("release") }

dependencies:

- { $eval: as_slugid("check_lint") }

provisionerId: "${provisionerId}"

workerType: "${workerType}"

created: { $fromNow: "" }

deadline: { $fromNow: "1 hour" }

payload:

features:

# Needed for access to secret

taskclusterProxy: true

maxRunTime: 3600

image: "${taskboot_image}"

env:

TASKCLUSTER_SECRET: "project/relman/code-coverage/release"

command:

- taskboot

- github-release

- mozilla/code-coverage

- "${version}"

scopes:

- "secrets:get:project/relman/code-coverage/release"

metadata:

name: "Code Coverage Release ${version}"

description: Code Coverage Github automated release

owner: bastien@mozilla.com

source: https://github.com/mozilla/code-coverage