.drone.yml

@@ -2,21 +2,18 @@ kind: pipeline
 type: docker
 name: cicd-pipeline
 
-# Let Drone handle the clone automatically; it's faster and cleaner.
 clone:
   depth: 1
 
 steps:
   - name: build-test-publish
-    image: nexus.khongisa.co.za/mcr.microsoft.com/dotnet/sdk:10.0
+    image: nexus.khongisa.co.za/sdk:10.0
     commands:
       - dotnet restore --source https://nexus.khongisa.co.za/repository/nuget-group/index.json --no-cache
       - dotnet build --configuration Release --no-restore
       - dotnet test --configuration Release --no-build
       - dotnet publish --configuration Release --no-build
 
-  # --- PACKAGE STAGE ---
-  # We build the image locally first so we can scan it BEFORE pushing
   - name: docker-build
     image: plugins/docker
     settings:
@@ -27,9 +24,7 @@ steps:
         from_secret: docker_username
       password:
         from_secret: docker_password
-      # This builds the image and loads it into the local cache for scanning
       dry_run: true 
-      # Set to false once you verify the scan passes, or see the step below
 
   - name: docker-push
     image: plugins/docker
@@ -45,7 +40,6 @@ steps:
   - name: vulnerability-scan
     image: aquasec/trivy:0.50.1
     environment:
-      # Trivy needs these to pull the image from your Nexus to scan it
       TRIVY_USERNAME:
         from_secret: docker_username
       TRIVY_PASSWORD:
@@ -53,7 +47,6 @@ steps:
     commands:
       - trivy image --exit-code 1 --severity CRITICAL nexus.khongisa.co.za/webapitest:${DRONE_BUILD_NUMBER}
 
-  # --- DEPLOY STAGE ---
   - name: deploy-uat
     image: appleboy/drone-ssh
     settings:
@@ -64,10 +57,8 @@ steps:
       password: 
         from_secret: ssh_password
       script:
-        # Login to Nexus on the remote server
         - echo $DOCKER_PASSWORD | docker login nexus.khongisa.co.za -u $DOCKER_USERNAME --password-stdin
         - docker pull nexus.khongisa.co.za/webapitest:latest
-        # Standard Linux cleanup
         - docker stop webapi 2>/dev/null || true
         - docker rm webapi 2>/dev/null || true
         - docker run -d --name webapi --restart unless-stopped -e ASPNETCORE_ENVIRONMENT=Development -p 4000:8081 nexus.khongisa.co.za/webapitest:latest