image: byteb4rb1e/build-trivy063-ubuntu:latest
definitions:
    steps:
        - step: &make
            name: build, scan, archive and publish targets defined in ./TARGET
            services:
                - docker
            script:
                - echo "$_GPG_SIGNING_KEY" | base64 -d | gpg --import
                - docker login -u $DOCKER_USERNAME --password-stdin <<< $DOCKER_PASSWORD
                - sh configure
                - make $(cat TARGET | tr "\n" " ") PUBLISH=1 ARCHIVE=1 PUBLISH_ARCHIVE=1 SIGN_ARCHIVE=1 SCAN=1 SIGN_SCAN=1 -j2
pipelines:
    default:
        - step: *make