.taskcluster.yml

version: 1
policy:
  pullRequests: collaborators
tasks:
  $let:

    project_name:
      browser-memory-monitor

    matrix:
      language: python
      secrets:
        - type: env
          secret: project/fuzzing/codecov-browser-memory-monitor
          name: CODECOV_TOKEN
          key: token
      script:
        - bash
        - '-xec'
        - tox; tox -e codecov
      jobs:
        include:
          - name: tests python 3.7
            version: "3.7"
            env:
              TOXENV: py37
          - name: tests python 3.8
            version: "3.8"
            env:
              TOXENV: py38
          - name: tests python 3.9
            version: "3.9"
            env:
              TOXENV: py39
          - name: tests python 3.10
            version: "3.10"
            env:
              TOXENV: py310
          - name: lint
            version: "3.10"
            env:
              TOXENV: lint
            script:
              - tox
          - name: PyPI upload
            version: "3.8"
            env:
              TOXENV: pypi
            script:
              - tox
            when:
              release: true
              all_passed: true
            secrets:
              - type: env
                secret: project/fuzzing/pypi-browser-memory-monitor
                name: TWINE_USERNAME
                key: username
              - type: env
                secret: project/fuzzing/pypi-browser-memory-monitor
                name: TWINE_PASSWORD
                key: password

    # Filter github event to only necessary fields.
    #   Since we use a large list of test fixtures, broad changes can exceed
    #   Docker environment variable size limits.
    gh_event:
      sender: {$eval: event.sender}
      repository: {$eval: event.repository}
      before: {$eval: "event['before']"}
      after: {$eval: "event['after']"}
      number: {$eval: "event['number']"}
      release: {$eval: "event['release']"}
      ref: {$eval: "event['ref']"}
      pull_request:
        $if: 'tasks_for == "github-pull-request"'
        then:
          head: {$eval: event.pull_request.head}
          base: {$eval: event.pull_request.base}

  in:
    $if: 'tasks_for != "github-pull-request" || event["action"] in ["opened", "reopened", "synchronize"]'
    then:
      - created: {$fromNow: ''}
        deadline: {$fromNow: '1 hour'}
        provisionerId: proj-fuzzing
        workerType: ci
        payload:
          features:
            taskclusterProxy: true
          maxRunTime: 3600
          image:
            type: indexed-image
            path: public/orion-decision.tar.zst
            namespace: project.fuzzing.orion.orion-decision.master
          env:
            PROJECT_NAME: ${project_name}
            CI_MATRIX: {$json: {$eval: matrix}}
            GITHUB_EVENT: {$json: {$eval: gh_event}}
            GITHUB_ACTION: ${tasks_for}
            TASKCLUSTER_NOW: ${now}
          command:
            - ci-decision
            - -v
        scopes:
          - queue:create-task:highest:proj-fuzzing/ci
          - queue:create-task:highest:proj-fuzzing/ci-*
          - queue:scheduler-id:taskcluster-github
          - secrets:get:project/fuzzing/codecov-browser-memory-monitor
          - secrets:get:project/fuzzing/pypi-browser-memory-monitor
        metadata:
          name: ${project_name} CI decision
          description: Schedule CI tasks for ${project_name}
          owner: truber@mozilla.com
          source: https://github.com/MozillaSecurity/orion