kind: pipeline
type: kubernetes
name: default

steps:
- name: check for Hardcoded Credentials
  image: plugins/gitleaks

- name: woke check
  image: getwoke/woke
  commands:
  - woke

- name: build
  image: node
  commands:
  - npm install typescript
  - npx tsc

- name: build docker file and publish
  image: plugins/docker
  settings:
    repo: llamprecht/knilch-web
    auto_tag: true
    registry: https://git.cluster.stumblestore.de/
    username: llamprecht
    password:
      from_secret: docker_password

- name: deploy
  image: vallard/drone-kube
  template: deployment.yaml
  namespace: knilch-web
  when:
    event:
    - promote
    target:
    - production