pipeline {
  agent any

  options {
    ansiColor('xterm')
    disableConcurrentBuilds()
    timestamps()
  }

  parameters {
    string(name: 'CHECKOV_IMAGE_TAG', defaultValue: 'latest', description: 'The tag of the terraform-static-code-analysis image to use to scan the Terraform code.')
    string(name: 'SHARED_LIBRARIES_VERSION', defaultValue: 'master', description: 'The version of the Jenkins shared libraries to use. Can be a branch, tag or Git revision.')
  }

  triggers {
    issueCommentTrigger('.*retest this please.*')
  }

  stages {
    stage('Load Shared Libraries') {
      steps {
        library "jenkins-global-libraries@${params.SHARED_LIBRARIES_VERSION}"
      }
    }
    stage('Terraform Scan') {
      when {
        not { branch 'master' }
      }
      steps {
        terraformScan(checkovImageTag: params.CHECKOV_IMAGE_TAG)
      }
    }
  }
}