Merge pull request #107 from sourcegraph/wb/use-mise

Use Mise

Author: burmudar

.buildkite/ci-checkov.sh

@@ -2,10 +2,6 @@
 # Set this to fail on the install
 set -euxo pipefail
 
-# Install and run the plugin for checkov
-# Use the full path to run pip3.10
-pip3 install checkov
-
 # List of checks we do not want to run here
 # This is a living list and will see additions and mostly removals over time.
 SKIP_CHECKS="CKV_GCP_22,CKV_GCP_66,CKV_GCP_13,CKV_GCP_71,CKV_GCP_61,CKV_GCP_21,CKV_GCP_65,CKV_GCP_67,CKV_GCP_20,CKV_GCP_69,CKV_GCP_12,CKV_GCP_24,CKV_GCP_25,CKV_GCP_64,CKV_GCP_68,CKV2_AWS_5,CKV2_GCP_3,CKV2_GCP_5,CKV_AWS_23,CKV_GCP_70,CKV_GCP_62,CKV_GCP_62,CKV_GCP_62,CKV_GCP_62,CKV_GCP_29,CKV_GCP_39"
@@ -19,7 +15,7 @@ echo "==========================================================================
 # Set not to fail on non-zero exit code
 set +e
 # Run checkov
-python3 -m checkov.main --skip-check $SKIP_CHECKS --quiet --framework terraform --compact -d .
+checkov --skip-check $SKIP_CHECKS --quiet --framework terraform --compact -d .
 
 # Options
 # --quiet: Only show failing tests

.buildkite/hooks/asdf-pre-command

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+set -eu
+pushd "$(dirname "${BASH_SOURCE[0]}")"/../..
+
+TOOL_VERSION_FILES=()
+mapfile -d $'\0' TOOL_VERSION_FILES < <(fd .tool-versions --hidden --absolute-path --print0)
+
+for file in "${TOOL_VERSION_FILES[@]}"; do
+	echo "Installing asdf dependencies as defined in ${file}:"
+	parent=$(dirname "${file}")
+	pushd "${parent}"
+
+	asdf install
+
+	popd
+done
+
+popd

.buildkite/hooks/pre-command

@@ -1,19 +1,11 @@
 #!/usr/bin/env bash
-
-set -eu
-pushd "$(dirname "${BASH_SOURCE[0]}")"/../..
-
-TOOL_VERSION_FILES=()
-mapfile -d $'\0' TOOL_VERSION_FILES < <(fd .tool-versions --hidden --absolute-path --print0)
-
-for file in "${TOOL_VERSION_FILES[@]}"; do
-	echo "Installing asdf dependencies as defined in ${file}:"
-	parent=$(dirname "${file}")
-	pushd "${parent}"
-
-	asdf install
-
-	popd
-done
-
-popd
+# Skip the rest if this is pipeline upload or empty
+if [[ "${BUILDKITE_COMMAND:-}" =~ "buildkite-agent pipeline upload".* ]]; then
+  exit 0
+elif [[ "${BUILDKITE_COMMAND:-}" = "" ]]; then
+  exit 0
+fi
+
+if [ ! -f .use_mise ]; then
+  source ./asdf-pre-command
+fi

.tool-versions

@@ -1,5 +1,5 @@
 yarn 1.22.4
 kubectl 1.17.3
-fd 7.4.0
-pulumi 3.2.1
-python system
+fd      7.4.0
+pulumi  3.2.1
+checkov latest

.use_mise

@@ -0,0 +1,6 @@
+Stateless CI agents use the presence of this file to determine whether it should install tools with mise or install them with ASDF.
+Thus if you delete this file, CI will use ASDF to install tools and not mise.
+
+The file is only meant to be here while we transition to using mise completely.
+
+For more information you can reach out to the dev-infra team on #discuss-dev-infra.