config.yml

# Use the latest 2.1 version of CircleCI pipeline process engine.
# See: https://circleci.com/docs/2.0/configuration-reference
version: 2.1

orbs:
  # The Node.js orb contains a set of prepackaged CircleCI configuration you can utilize
  # Orbs reduce the amount of configuration required for common tasks.
  # See the orb documentation here: https://circleci.com/developer/orbs/orb/circleci/node
  node: circleci/node@4.7
  snyk: snyk/snyk@1.1.2
  defaults: &defaults
    working_directory: ~/repo/tmp
    docker:
      - image: cimg/node:16.10

jobs:
  download-deps:
    <<: *defaults
    steps:
      - run:
          name:  Download cc-test-reporter
          command: |
            mkdir -p repo/tmp/
            curl -L https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 > ./repo/tmp/cc-test-reporter
            chmod +x ./repo/tmp/cc-test-reporter
      - persist_to_workspace:
          root: ./repo/tmp
          paths:
            - cc-test-reporter
      - run:
          name: List Files
          command: ls -la

  setup-environment:
    <<: *defaults
    steps: 
      # Checkout the code as the first step.
      - checkout:
          path: ~/repo/tmp
      - attach_workspace:
          at: ~/repo/tmp
      # Next, the node orb's install-packages step will install the dependencies from a package.json.
      # The orb install-packages step will also automatically cache them for faster future runs.
      - node/install-packages:
          # If you are using yarn, change the line below from "npm" to "yarn"
          pkg-manager: npm


  # Below is the definition of your job to build and test your app, you can rename and customize it as you want.
  test:
    <<: *defaults
    # Then run your tests!
    # CircleCI will report the results back to your VCS provider.
    steps:
      - checkout:
          path: ~/repo/tmp
      - attach_workspace:
          at: ~/repo/tmp
      # Next, the node orb's install-packages step will install the dependencies from a package.json.
      # The orb install-packages step will also automatically cache them for faster future runs.
      - node/install-packages:
          # If you are using yarn, change the line below from "npm" to "yarn"
          pkg-manager: npm
      - run:
          name: list file
          command: ls -la && echo $PWD
      - attach_workspace:
          at: ~/repo/tmp
      - run:
          name: Run tests
          command: |
            npm test
            ./tmp/cc-test-reporter format-coverage -t lcov -o tmp/codeclimate.npm.json coverage/frontend/lcov.info
  
  upload-coverage:
    <<: *defaults
    environment:
      CC_TEST_REPORTER_ID: $CC_API_KEY
    steps:
      - attach_workspace:
          at: ~/repo/tmp
      - run:
          name: Upload coverage results to Code Climate
          command : |
              ./tmp/cc-test-reporter upload-coverage -i tmp/codeclimate.npm.json

  scan-vulnerabilities:
    <<: *defaults
    environment: 
      SNYK_TOKEN: $SNYK_API_KEY
    steps: 
      - snyk/scan:
          token-variable: SNYK_TOKEN 
          fail-on-issues: true
          command: test
          target-file: ~/repo/tmp/dist/toaste-notifier.js
          monitor-on-build: true
          protect: false
          severity-threshold: medium
          os: linux
  
  build:
    <<: *defaults
    steps:
      - run:
          name: Package build
          command: npm run build

  publish:
    <<: *defaults
    steps:
      - attach_workspace:
          at: ~/repo/tmp
      - run:
          name: Auth with NPM
          command: echo "//registry.npmjs.org/:_authToken=$NPM_API_KEY" > ~/repo/tmp/.npmrc
      - run:
          name: Publish Package
          command: npm publish 


workflows:
  # Below is the definition of your workflow.
  # Inside the workflow, you provide the jobs you want to run, e.g this workflow runs the build-and-test job above.
  # CircleCI will run this workflow on every commit.
  # For more details on extending your workflow, see the configuration docs: https://circleci.com/docs/2.0/configuration-reference/#workflows
  build-test:
    jobs:
      - download-deps:
          context: NPM
      - setup-environment:
          context: NPM
          requires:
            - download-deps
      - test:
          context: NPM
          requires:
            - setup-environment
      - upload-coverage:
          context: NPM
          requires:
            - test
      - build:
          context: NPM
          requires:
            - test
      - scan-vulnerabilities:
          context: NPM
          requires:
            - build
      - publish:
          context: NPM
          requires:
            - scan-vulnerabilities
      # For running simple node tests, you could optionally use the node/test job from the orb to replicate and replace the job above in fewer lines.
      # - node/test