when:
  - event: push
    branch: main
  - event: tag

variables:
  - &registry git.mosaicstack.dev
  - &image git.mosaicstack.dev/mosaic/openbrain

steps:
  lint:
    image: python:3.12-slim
    commands:
      - pip install ruff --quiet
      - ruff check src/
      - ruff format --check src/

  build:
    image: plugins/kaniko
    settings:
      registry: *registry
      repo: *image
      tags:
        - sha-${CI_COMMIT_SHA:0:8}
        - latest
      username:
        from_secret: GITEA_USERNAME
      password:
        from_secret: GITEA_TOKEN
      build_args:
        - BUILDKIT_INLINE_CACHE=1
    when:
      - event: push
        branch: main

  build-tag:
    image: plugins/kaniko
    settings:
      registry: *registry
      repo: *image
      tags:
        - ${CI_COMMIT_TAG}
        - sha-${CI_COMMIT_SHA:0:8}
      username:
        from_secret: GITEA_USERNAME
      password:
        from_secret: GITEA_TOKEN
    when:
      - event: tag