Remove Sec-jobs from Merge Train

Make sure to read our contributing guide

.gitlab-ci.yml

@@ -44,11 +44,6 @@ stages:
     paths:
       - .gradle/
     policy: pull
-  rules:
-    - if: $CI_COMMIT_BRANCH == "master"
-    - if: $CI_COMMIT_BRANCH == "development"
-    - if: $CI_MERGE_REQUEST_ID
-    - if: $CI_PIPELINE_SOURCE == "push"
 
 .gitlab_reporter:
   stage: gitlab reports
@@ -60,6 +55,12 @@ stages:
 gradle_build:
   extends: .build_cached
   stage: build 1
+  rules:
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID ||
+        $CI_PIPELINE_SOURCE == "push" ||
+        $CI_PIPELINE_SOURCE == "trigger"
   cache:
     policy: pull-push
   artifacts:
@@ -70,29 +71,17 @@ gradle_build:
   script:
     - ./gradlew --build-cache build -x test -x licenseMain -x licenseTest -x spotlessJava -x spotlessCheck
 
-# Runs build and publish JAR jobs on Labracore
-#labracore_build:
-#  stage: build
-#  only:
-#    - master
-#    - development
-#    - merge_requests
-#    - pushes
-#  trigger:
-#    project: eip/labrador/labracore
-#    branch: gitlab-ci-dev
-#    strategy: depend
-
 # Generate the pom for dependency scanning
 generate_pom:
   extends: .build_cached
   stage: build 2
   rules:
-    - if: $CI_PIPELINE_SOURCE == "trigger"
+    - if: $CI_PIPELINE_SOURCE == "trigger" ||
+        $CI_MERGE_REQUEST_EVENT_TYPE == "merge_train"
       when: never
-    - if: $CI_COMMIT_BRANCH == "master"
-    - if: $CI_COMMIT_BRANCH == "development"
-    - if: $CI_MERGE_REQUEST_ID
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID
   needs:
     - gradle_build
   artifacts:
@@ -112,7 +101,13 @@ gradle_test:
   stage: test
   needs:
     - gradle_build
-#    - labracore_build
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "trigger"
+      when: never
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID ||
+        $CI_PIPELINE_SOURCE == "push"
   cache:
     policy: pull-push
   coverage: '/Code coverage: \d+\.\d+/'
@@ -141,6 +136,13 @@ gradle_spotless:
   extends: .build_cached
   needs:
     - gradle_build
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "trigger"
+      when: never
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID ||
+        $CI_PIPELINE_SOURCE == "push"
   artifacts:
     name: spotless
     expose_as: Spotless Diagnosis
@@ -160,6 +162,13 @@ gradle_licenses:
   needs:
     - gradle_build
   stage: review
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "trigger"
+      when: never
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID ||
+        $CI_PIPELINE_SOURCE == "push"
   script:
     - ./gradlew --build-cache licenseMain
     - ./gradlew --build-cache licenseTest
@@ -169,6 +178,12 @@ gradle_licenses:
 publish_jar:
   extends: .build_cached
   stage: publish
+  rules:
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID ||
+        $CI_PIPELINE_SOURCE == "push" ||
+        $CI_PIPELINE_SOURCE == "trigger"
   needs:
     - gradle_build
   artifacts:
@@ -196,9 +211,12 @@ code_quality:
   extends:
     - .gitlab_reporter
   rules:
-    - if: $CI_COMMIT_BRANCH == "master"
-    - if: $CI_COMMIT_BRANCH == "development"
-    - if: $CI_MERGE_REQUEST_ID
+    - if: $CI_PIPELINE_SOURCE == "trigger" ||
+        $CI_MERGE_REQUEST_EVENT_TYPE == "merge_train"
+      when: never
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID
   stage: gitlab reports
 
 # Runs the SAST reporter manually
@@ -206,12 +224,14 @@ code_quality:
 #  even though it should have been configured)
 sast:
   extends:
-#    - .build_cached
     - .gitlab_reporter
   rules:
-    - if: $CI_COMMIT_BRANCH == "master"
-    - if: $CI_COMMIT_BRANCH == "development"
-    - if: $CI_MERGE_REQUEST_ID
+    - if: $CI_PIPELINE_SOURCE == "trigger" ||
+        $CI_MERGE_REQUEST_EVENT_TYPE == "merge_train"
+      when: never
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID
   stage: gitlab reports
   image: docker:stable
   variables:
@@ -239,6 +259,9 @@ dast:
     - .build_cached
     - .gitlab_reporter
   rules:
+    - if: $CI_PIPELINE_SOURCE == "trigger" ||
+        $CI_MERGE_REQUEST_EVENT_TYPE == "merge_train"
+      when: never
     - if: $CI_COMMIT_BRANCH == "master"
       when: manual
   stage: gitlab reports
@@ -253,9 +276,11 @@ container_scanning:
     - .build_cached
     - .gitlab_reporter
   rules:
-    - if: $CI_COMMIT_BRANCH == "master"
-      when: manual
-    - if: $CI_COMMIT_BRANCH == "development"
+    - if: $CI_PIPELINE_SOURCE == "trigger" ||
+        $CI_MERGE_REQUEST_EVENT_TYPE == "merge_train"
+      when: never
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development"
       when: manual
   stage: gitlab reports
   before_script:
@@ -268,9 +293,12 @@ dependency_scanning:
     - .build_cached
     - .gitlab_reporter
   rules:
-    - if: $CI_COMMIT_BRANCH == "master"
-    - if: $CI_COMMIT_BRANCH == "development"
-    - if: $CI_MERGE_REQUEST_ID
+    - if: $CI_PIPELINE_SOURCE == "trigger" ||
+        $CI_MERGE_REQUEST_EVENT_TYPE == "merge_train"
+      when: never
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID
   stage: gitlab reports
   needs:
     - generate_pom
@@ -287,9 +315,12 @@ license_scanning:
     - .build_cached
     - .gitlab_reporter
   rules:
-    - if: $CI_COMMIT_BRANCH == "master"
-    - if: $CI_COMMIT_BRANCH == "development"
-    - if: $CI_MERGE_REQUEST_ID
+    - if: $CI_PIPELINE_SOURCE == "trigger" ||
+        $CI_MERGE_REQUEST_EVENT_TYPE == "merge_train"
+      when: never
+    - if: $CI_COMMIT_BRANCH == "master" ||
+        $CI_COMMIT_BRANCH == "development" ||
+        $CI_MERGE_REQUEST_ID
   stage: gitlab reports
   needs:
     - generate_pom