pipeline {
  agent none

  options {
    ansiColor('xterm')
    disableConcurrentBuilds()
    timestamps()
  }

  parameters {
    string(name: 'CHECKOV_IMAGE_TAG', defaultValue: 'latest', description: 'The tag of the terraform-static-code-analysis image to use to scan the Terraform code.')
    string(name: 'SHARED_LIBRARIES_VERSION', defaultValue: 'master', description: 'The version of the Jenkins shared libraries to use. Can be a branch, tag or Git revision.')
  }

  triggers {
    issueCommentTrigger('.*retest this please.*')
  }

  stages {
    stage('Load Shared Libraries') {
      steps {
        library "jenkins-global-libraries@${params.SHARED_LIBRARIES_VERSION}"
      }
    }
    stage('Run Checks') {
      when {
        not { branch 'master' }
      }
      parallel {
        stage('Terraform Scan') {
          agent any
          steps {
            terraformScan(checkovImageTag: params.CHECKOV_IMAGE_TAG)
          }
        }
        stage('Terraform PR Review') {
          agent any
          steps {
            aiPullRequestReview()
          }
        }
      }
    }
  }
}