From db982ef69d2f40adde2e2af1722f9280dae9795b Mon Sep 17 00:00:00 2001
From: Viktor Pettersson <36230100+viktigpetterr@users.noreply.github.com>
Date: Sun, 12 Jun 2022 18:03:41 +0200
Subject: [PATCH] Add Argo workflows template (#1)

---
 README.md |  4 +++
 argo.yml  | 81 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 85 insertions(+)
 create mode 100644 argo.yml

diff --git a/README.md b/README.md
index b7dfc5a..b5f2391 100644
--- a/README.md
+++ b/README.md
@@ -41,3 +41,7 @@ Different CI/CD tools offer different support for this. Below you can find docs
 ## Azure Pipelines
 - Add Debricked token variable. [Read more](https://debricked.com/docs/integrations/ci-build-systems/azure-devops.html)
 - [See template](azure-pipelines.yml)
+
+## Argo Workflows
+- Add Debricked token variable. [Read more](https://debricked.com/docs/integrations/ci-build-systems/argo-workflows.html)
+- [See template](argo.yml)
diff --git a/argo.yml b/argo.yml
new file mode 100644
index 0000000..3435501
--- /dev/null
+++ b/argo.yml
@@ -0,0 +1,81 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Workflow
+metadata:
+  generateName: debricked-
+spec:
+  entrypoint: debricked
+  arguments:
+    parameters:
+      - name: git-url # For example: https://github.com/debricked/go-templates.git
+      - name: debricked-token # Consider using kubernetes secrets instead. For more details, see: https://github.com/argoproj/argo-workflows/blob/master/examples/secrets.yaml
+
+  templates:
+    - name: debricked
+      inputs:
+        parameters:
+          - name: git-url
+          - name: debricked-token
+      steps:
+        - - name: build
+            template: build
+            arguments:
+              parameters:
+                - name: git-url
+                  value: "{{inputs.parameters.git-url}}"
+        - - name: scan
+            template: scan
+            arguments:
+              parameters:
+                - name: git-url
+                  value: "{{inputs.parameters.git-url}}"
+                - name: debricked-token
+                  value: "{{inputs.parameters.debricked-token}}"
+              artifacts:
+                - name: repository
+                  from: "{{steps.build.outputs.artifacts.repository}}"
+
+    - name: build
+      inputs:
+        parameters:
+          - name: git-url
+        artifacts:
+          - name: repository
+            path: /repository
+            git: # For more details, see: https://github.com/argoproj/argo-workflows/blob/master/examples/input-artifact-git.yaml
+              repo: "{{inputs.parameters.git-url}}"
+      outputs:
+        artifacts:
+          - name: repository
+            path: /repository
+      container:
+        name: 'gradle'
+        image: gradle:7-jdk11
+        workingDir: /repository
+        command:
+          - /bin/sh
+          - '-c'
+        args:
+          - ./gradlew dependencies > .debricked-gradle-dependencies.txt
+
+    - name: scan
+      inputs:
+        parameters:
+          - name: debricked-token
+          - name: git-url
+        artifacts:
+          - name: repository
+            path: /repository
+      container:
+        name: 'debricked-scan'
+        image: debricked/debricked-scan:latest
+        workingDir: /repository
+        command:
+          - /bin/sh
+          - '-c'
+        args:
+          - /argo.sh
+        env:
+          - name: DEBRICKED_TOKEN
+            value: "{{inputs.parameters.debricked-token}}"
+          - name: DEBRICKED_GIT_URL
+            value: "{{inputs.parameters.git-url}}"