@catladder/pipeline 1.144.1 → 1.145.0

package/examples/__snapshots__/custom-deploy.ts.snap

@@ -33,6 +33,9 @@ exports[`matches snapshot 1`] = `
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_PATH="www"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
           "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
           "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
@@ -49,7 +52,6 @@ exports[`matches snapshot 1`] = `
         ],
         "stage": "test",
         "variables": {
-          "APP_PATH": "www",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
@@ -102,7 +104,21 @@ exports[`matches snapshot 1`] = `
           ],
         },
         "script": [
-          "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export ENV_SHORT="dev"",
+          "export APP_DIR="www"",
+          "export ENV_TYPE="dev"",
+          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
+          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
+          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\///'); [ -z "$tag" ] && echo "v0.0.0" || echo "$tag")"",
+          "export HOST="unknown-host.example.com"",
+          "export ROOT_URL="https://unknown-host.example.com"",
+          "export HOST_INTERNAL="unknown-host.example.com"",
+          "export HOST_CANONICAL="unknown-host.example.com"",
+          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
+          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\"]"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
+          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > www/__build_info.json",
           "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
           "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
           "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
@@ -119,20 +135,9 @@ exports[`matches snapshot 1`] = `
         ],
         "stage": "build",
         "variables": {
-          "APP_DIR": "www",
-          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
-          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
-          "BUILD_INFO_ID": "some-id",
-          "ENV_SHORT": "dev",
-          "ENV_TYPE": "dev",
-          "HOST": "unknown-host.example.com",
-          "HOST_CANONICAL": "unknown-host.example.com",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
-          "ROOT_URL": "https://unknown-host.example.com",
-          "ROOT_URL_INTERNAL": "https://unknown-host.example.com",
-          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL"]",
         },
       },
       "www 🔨 docker | dev ": {
@@ -158,6 +163,22 @@ exports[`matches snapshot 1`] = `
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_DIR="www"",
+          "export DOCKER_DIR="."",
+          "export DOCKER_REGISTRY="$CI_REGISTRY"",
+          "export DOCKER_CACHE_IMAGE="$CI_REGISTRY_IMAGE/caches/www"",
+          "export DOCKER_IMAGE_NAME="dev/www"",
+          "export DOCKER_IMAGE="$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"",
+          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
+          "export DOCKER_COPY_AND_INSTALL_APP="COPY --chown=node:node $APP_DIR .
+RUN yarn plugin import workspace-tools
+RUN yarn workspaces focus --production && yarn rebuild"",
+          "export DOCKER_COPY_WORKSPACE_FILES="COPY --chown=node:node www/package.json /app/www/package.json
+COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
+COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
+COPY --chown=node:node .yarn /app/.yarn"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "ensureNodeDockerfile",
           "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
           "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
@@ -181,25 +202,9 @@ exports[`matches snapshot 1`] = `
         ],
         "stage": "build",
         "variables": {
-          "APP_DIR": "www",
-          "DOCKERFILE_ADDITIONS": undefined,
-          "DOCKERFILE_ADDITIONS_END": undefined,
           "DOCKER_BUILDKIT": "1",
-          "DOCKER_CACHE_IMAGE": "$CI_REGISTRY_IMAGE/caches/www",
-          "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
-RUN yarn plugin import workspace-tools
-RUN yarn workspaces focus --production && yarn rebuild",
-          "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
-COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
-COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
-COPY --chown=node:node .yarn /app/.yarn",
-          "DOCKER_DIR": ".",
           "DOCKER_DRIVER": "overlay2",
           "DOCKER_HOST": "tcp://0.0.0.0:2375",
-          "DOCKER_IMAGE": "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME",
-          "DOCKER_IMAGE_NAME": "dev/www",
-          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
-          "DOCKER_REGISTRY": "$CI_REGISTRY",
           "DOCKER_TLS_CERTDIR": "",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "2Gi",
@@ -208,12 +213,17 @@ COPY --chown=node:node .yarn /app/.yarn",
       },
       "www 🚀 Deploy | dev ": {
         "allow_failure": false,
+        "artifacts": {
+          "reports": {
+            "dotenv": "gitlab_environment.env",
+          },
+        },
         "cache": [],
         "environment": {
           "auto_stop_in": "4 weeks",
           "name": "dev/www",
           "on_stop": "www 🛑 Stop ⚠️ | dev ",
-          "url": "https://unknown-host.example.com",
+          "url": "$CL_GITLAB_ENVIRONMENT_URL",
         },
         "image": "path/to/docker/jobs-default:the-version",
         "interruptible": true,
@@ -256,40 +266,50 @@ COPY --chown=node:node .yarn /app/.yarn",
           },
         ],
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export ENV_SHORT="dev"",
+          "export APP_DIR="www"",
+          "export ENV_TYPE="dev"",
+          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
+          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
+          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\///'); [ -z "$tag" ] && echo "v0.0.0" || echo "$tag")"",
+          "export HOST="unknown-host.example.com"",
+          "export ROOT_URL="https://unknown-host.example.com"",
+          "export HOST_INTERNAL="unknown-host.example.com"",
+          "export HOST_CANONICAL="unknown-host.example.com"",
+          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
+          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\"]"",
+          "export DOCKER_REGISTRY="$CI_REGISTRY"",
+          "export DOCKER_CACHE_IMAGE="$CI_REGISTRY_IMAGE/caches/www"",
+          "export DOCKER_IMAGE_NAME="dev/www"",
+          "export DOCKER_IMAGE="$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"",
+          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
+          "export DEPLOY_API_KEY="$CL_dev_www_DEPLOY_API_KEY"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "cd www",
           "echo 'would deploy'",
           "echo Uploading SBOM to Dependency Track",
           "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://unknown-host.example.com" "__sbom.json" vex.json || true",
+          "echo "CL_GITLAB_ENVIRONMENT_URL=https://unknown-host.example.com" >> gitlab_environment.env",
         ],
         "stage": "deploy dev",
         "variables": {
-          "APP_DIR": "www",
-          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
-          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
-          "BUILD_INFO_ID": "some-id",
-          "DEPLOY_API_KEY": "$CL_dev_www_DEPLOY_API_KEY",
-          "DOCKER_CACHE_IMAGE": "$CI_REGISTRY_IMAGE/caches/www",
-          "DOCKER_IMAGE": "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME",
-          "DOCKER_IMAGE_NAME": "dev/www",
-          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
-          "DOCKER_REGISTRY": "$CI_REGISTRY",
-          "ENV_SHORT": "dev",
-          "ENV_TYPE": "dev",
-          "HOST": "unknown-host.example.com",
-          "HOST_CANONICAL": "unknown-host.example.com",
           "KUBERNETES_CPU_REQUEST": "1",
           "KUBERNETES_MEMORY_LIMIT": "2048Mi",
           "KUBERNETES_MEMORY_REQUEST": "1024Mi",
-          "ROOT_URL": "https://unknown-host.example.com",
-          "ROOT_URL_INTERNAL": "https://unknown-host.example.com",
-          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL"]",
         },
       },
       "www 🛑 Stop ⚠️ | dev ": {
+        "allow_failure": true,
+        "artifacts": {
+          "reports": {
+            "dotenv": "gitlab_environment.env",
+          },
+        },
         "environment": {
           "action": "stop",
           "name": "dev/www",
-          "url": "https://unknown-host.example.com",
+          "url": "$CL_GITLAB_ENVIRONMENT_URL",
         },
         "image": "path/to/docker/jobs-default:the-version",
         "interruptible": true,
@@ -303,27 +323,28 @@ COPY --chown=node:node .yarn /app/.yarn",
         },
         "rules": [
           {
-            "allow_failure": true,
             "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
             "when": "on_success",
           },
           {
-            "allow_failure": true,
             "when": "manual",
           },
         ],
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export DEPLOY_API_KEY="$CL_dev_www_DEPLOY_API_KEY"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "echo 'would stop'",
           "echo Disabling component in Dependency Track",
           "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://unknown-host.example.com" || true",
+          "echo "CL_GITLAB_ENVIRONMENT_URL=https://unknown-host.example.com" >> gitlab_environment.env",
         ],
         "stage": "stop dev",
         "variables": {
-          "DEPLOY_API_KEY": "$CL_dev_www_DEPLOY_API_KEY",
           "GIT_STRATEGY": "none",
-          "KUBERNETES_CPU_REQUEST": "1",
-          "KUBERNETES_MEMORY_LIMIT": "2048Mi",
-          "KUBERNETES_MEMORY_REQUEST": "1024Mi",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
         },
       },
       "www 🛡 audit": {
@@ -339,12 +360,14 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_PATH="www"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "cd www",
           "yarn npm audit --environment production",
         ],
         "stage": "test",
         "variables": {
-          "APP_PATH": "www",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
@@ -378,6 +401,9 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_PATH="www"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
           "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
           "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
@@ -394,7 +420,6 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "test",
         "variables": {
-          "APP_PATH": "www",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
@@ -418,6 +443,8 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
         ],
         "stage": "build",
@@ -470,7 +497,7 @@ COPY --chown=node:node .yarn /app/.yarn",
     ],
     "variables": {
       "FF_USE_FASTZIP": "true",
-      "GIT_DEPTH": 1,
+      "GIT_DEPTH": "1",
     },
     "workflow": {
       "rules": [
@@ -528,6 +555,9 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_PATH="www"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
           "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
           "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
@@ -544,7 +574,6 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "test",
         "variables": {
-          "APP_PATH": "www",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
@@ -597,7 +626,21 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
-          "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export ENV_SHORT="review"",
+          "export APP_DIR="www"",
+          "export ENV_TYPE="review"",
+          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
+          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
+          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\///'); [ -z "$tag" ] && echo "v0.0.0" || echo "$tag")"",
+          "export HOST="unknown-host.example.com"",
+          "export ROOT_URL="https://unknown-host.example.com"",
+          "export HOST_INTERNAL="unknown-host.example.com"",
+          "export HOST_CANONICAL="unknown-host.example.com"",
+          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
+          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\"]"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
+          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > www/__build_info.json",
           "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
           "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
           "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
@@ -614,20 +657,9 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "build",
         "variables": {
-          "APP_DIR": "www",
-          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
-          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
-          "BUILD_INFO_ID": "some-id",
-          "ENV_SHORT": "review",
-          "ENV_TYPE": "review",
-          "HOST": "unknown-host.example.com",
-          "HOST_CANONICAL": "unknown-host.example.com",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
-          "ROOT_URL": "https://unknown-host.example.com",
-          "ROOT_URL_INTERNAL": "https://unknown-host.example.com",
-          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL"]",
         },
       },
       "www 🔨 docker | review ": {
@@ -653,6 +685,22 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_DIR="www"",
+          "export DOCKER_DIR="."",
+          "export DOCKER_REGISTRY="$CI_REGISTRY"",
+          "export DOCKER_CACHE_IMAGE="$CI_REGISTRY_IMAGE/caches/www"",
+          "export DOCKER_IMAGE_NAME="review/www"",
+          "export DOCKER_IMAGE="$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"",
+          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
+          "export DOCKER_COPY_AND_INSTALL_APP="COPY --chown=node:node $APP_DIR .
+RUN yarn plugin import workspace-tools
+RUN yarn workspaces focus --production && yarn rebuild"",
+          "export DOCKER_COPY_WORKSPACE_FILES="COPY --chown=node:node www/package.json /app/www/package.json
+COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
+COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
+COPY --chown=node:node .yarn /app/.yarn"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "ensureNodeDockerfile",
           "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
           "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
@@ -676,25 +724,9 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "build",
         "variables": {
-          "APP_DIR": "www",
-          "DOCKERFILE_ADDITIONS": undefined,
-          "DOCKERFILE_ADDITIONS_END": undefined,
           "DOCKER_BUILDKIT": "1",
-          "DOCKER_CACHE_IMAGE": "$CI_REGISTRY_IMAGE/caches/www",
-          "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
-RUN yarn plugin import workspace-tools
-RUN yarn workspaces focus --production && yarn rebuild",
-          "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
-COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
-COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
-COPY --chown=node:node .yarn /app/.yarn",
-          "DOCKER_DIR": ".",
           "DOCKER_DRIVER": "overlay2",
           "DOCKER_HOST": "tcp://0.0.0.0:2375",
-          "DOCKER_IMAGE": "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME",
-          "DOCKER_IMAGE_NAME": "review/www",
-          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
-          "DOCKER_REGISTRY": "$CI_REGISTRY",
           "DOCKER_TLS_CERTDIR": "",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "2Gi",
@@ -703,12 +735,17 @@ COPY --chown=node:node .yarn /app/.yarn",
       },
       "www 🚀 Deploy | review ": {
         "allow_failure": false,
+        "artifacts": {
+          "reports": {
+            "dotenv": "gitlab_environment.env",
+          },
+        },
         "cache": [],
         "environment": {
           "auto_stop_in": "1 week",
-          "name": "review/some-commit/www",
+          "name": "review/$CI_COMMIT_REF_NAME/www",
           "on_stop": "www 🛑 Stop ⚠️ | review ",
-          "url": "https://unknown-host.example.com",
+          "url": "$CL_GITLAB_ENVIRONMENT_URL",
         },
         "image": "path/to/docker/jobs-default:the-version",
         "interruptible": true,
@@ -751,40 +788,50 @@ COPY --chown=node:node .yarn /app/.yarn",
           },
         ],
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export ENV_SHORT="review"",
+          "export APP_DIR="www"",
+          "export ENV_TYPE="review"",
+          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
+          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
+          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\///'); [ -z "$tag" ] && echo "v0.0.0" || echo "$tag")"",
+          "export HOST="unknown-host.example.com"",
+          "export ROOT_URL="https://unknown-host.example.com"",
+          "export HOST_INTERNAL="unknown-host.example.com"",
+          "export HOST_CANONICAL="unknown-host.example.com"",
+          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
+          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\"]"",
+          "export DOCKER_REGISTRY="$CI_REGISTRY"",
+          "export DOCKER_CACHE_IMAGE="$CI_REGISTRY_IMAGE/caches/www"",
+          "export DOCKER_IMAGE_NAME="review/www"",
+          "export DOCKER_IMAGE="$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"",
+          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
+          "export DEPLOY_API_KEY="$CL_review_www_DEPLOY_API_KEY"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "cd www",
           "echo 'would deploy'",
           "echo Uploading SBOM to Dependency Track",
           "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://unknown-host.example.com" "__sbom.json" vex.json || true",
+          "echo "CL_GITLAB_ENVIRONMENT_URL=https://unknown-host.example.com" >> gitlab_environment.env",
         ],
         "stage": "deploy review",
         "variables": {
-          "APP_DIR": "www",
-          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
-          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
-          "BUILD_INFO_ID": "some-id",
-          "DEPLOY_API_KEY": "$CL_review_www_DEPLOY_API_KEY",
-          "DOCKER_CACHE_IMAGE": "$CI_REGISTRY_IMAGE/caches/www",
-          "DOCKER_IMAGE": "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME",
-          "DOCKER_IMAGE_NAME": "review/www",
-          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
-          "DOCKER_REGISTRY": "$CI_REGISTRY",
-          "ENV_SHORT": "review",
-          "ENV_TYPE": "review",
-          "HOST": "unknown-host.example.com",
-          "HOST_CANONICAL": "unknown-host.example.com",
           "KUBERNETES_CPU_REQUEST": "1",
           "KUBERNETES_MEMORY_LIMIT": "2048Mi",
           "KUBERNETES_MEMORY_REQUEST": "1024Mi",
-          "ROOT_URL": "https://unknown-host.example.com",
-          "ROOT_URL_INTERNAL": "https://unknown-host.example.com",
-          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL"]",
         },
       },
       "www 🛑 Stop ⚠️ | review ": {
+        "allow_failure": true,
+        "artifacts": {
+          "reports": {
+            "dotenv": "gitlab_environment.env",
+          },
+        },
         "environment": {
           "action": "stop",
-          "name": "review/some-commit/www",
-          "url": "https://unknown-host.example.com",
+          "name": "review/$CI_COMMIT_REF_NAME/www",
+          "url": "$CL_GITLAB_ENVIRONMENT_URL",
         },
         "image": "path/to/docker/jobs-default:the-version",
         "interruptible": true,
@@ -798,27 +845,28 @@ COPY --chown=node:node .yarn /app/.yarn",
         },
         "rules": [
           {
-            "allow_failure": true,
             "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
             "when": "on_success",
           },
           {
-            "allow_failure": true,
             "when": "manual",
           },
         ],
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export DEPLOY_API_KEY="$CL_review_www_DEPLOY_API_KEY"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "echo 'would stop'",
           "echo Disabling component in Dependency Track",
           "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://unknown-host.example.com" || true",
+          "echo "CL_GITLAB_ENVIRONMENT_URL=https://unknown-host.example.com" >> gitlab_environment.env",
         ],
         "stage": "stop review",
         "variables": {
-          "DEPLOY_API_KEY": "$CL_review_www_DEPLOY_API_KEY",
           "GIT_STRATEGY": "none",
-          "KUBERNETES_CPU_REQUEST": "1",
-          "KUBERNETES_MEMORY_LIMIT": "2048Mi",
-          "KUBERNETES_MEMORY_REQUEST": "1024Mi",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
         },
       },
       "www 🛡 audit": {
@@ -834,12 +882,14 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_PATH="www"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "cd www",
           "yarn npm audit --environment production",
         ],
         "stage": "test",
         "variables": {
-          "APP_PATH": "www",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
@@ -873,6 +923,9 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_PATH="www"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
           "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
           "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
@@ -889,7 +942,6 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "test",
         "variables": {
-          "APP_PATH": "www",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
@@ -913,6 +965,8 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
         ],
         "stage": "build",
@@ -965,7 +1019,7 @@ COPY --chown=node:node .yarn /app/.yarn",
     ],
     "variables": {
       "FF_USE_FASTZIP": "true",
-      "GIT_DEPTH": 1,
+      "GIT_DEPTH": "1",
     },
     "workflow": {
       "rules": [
@@ -1042,7 +1096,21 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
-          "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export ENV_SHORT="prod"",
+          "export APP_DIR="www"",
+          "export ENV_TYPE="prod"",
+          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
+          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
+          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\///'); [ -z "$tag" ] && echo "v0.0.0" || echo "$tag")"",
+          "export HOST="unknown-host.example.com"",
+          "export ROOT_URL="https://unknown-host.example.com"",
+          "export HOST_INTERNAL="unknown-host.example.com"",
+          "export HOST_CANONICAL="unknown-host.example.com"",
+          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
+          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\"]"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
+          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > www/__build_info.json",
           "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
           "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
           "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
@@ -1059,20 +1127,9 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "build",
         "variables": {
-          "APP_DIR": "www",
-          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
-          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
-          "BUILD_INFO_ID": "some-id",
-          "ENV_SHORT": "prod",
-          "ENV_TYPE": "prod",
-          "HOST": "unknown-host.example.com",
-          "HOST_CANONICAL": "unknown-host.example.com",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
-          "ROOT_URL": "https://unknown-host.example.com",
-          "ROOT_URL_INTERNAL": "https://unknown-host.example.com",
-          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL"]",
         },
       },
       "www 🔨 app | stage ": {
@@ -1122,7 +1179,21 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
-          "echo '{"id":"some-id","time":"01-01-2023 12:13:14"}' > www/__build_info.json",
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export ENV_SHORT="stage"",
+          "export APP_DIR="www"",
+          "export ENV_TYPE="stage"",
+          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
+          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
+          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\///'); [ -z "$tag" ] && echo "v0.0.0" || echo "$tag")"",
+          "export HOST="unknown-host.example.com"",
+          "export ROOT_URL="https://unknown-host.example.com"",
+          "export HOST_INTERNAL="unknown-host.example.com"",
+          "export HOST_CANONICAL="unknown-host.example.com"",
+          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
+          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\"]"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
+          "echo '{"id":"$(git describe --tags 2>/dev/null || git rev-parse HEAD)","time":"$CI_JOB_STARTED_AT"}' > www/__build_info.json",
           "echo -e "\\e[0Ksection_start:$(date +%s):nodeinstall[collapsed=true]\\r\\e[0KEnsure node version"",
           "if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi",
           "if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi",
@@ -1139,20 +1210,9 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "build",
         "variables": {
-          "APP_DIR": "www",
-          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
-          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
-          "BUILD_INFO_ID": "some-id",
-          "ENV_SHORT": "stage",
-          "ENV_TYPE": "stage",
-          "HOST": "unknown-host.example.com",
-          "HOST_CANONICAL": "unknown-host.example.com",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "4Gi",
           "KUBERNETES_MEMORY_REQUEST": "2Gi",
-          "ROOT_URL": "https://unknown-host.example.com",
-          "ROOT_URL_INTERNAL": "https://unknown-host.example.com",
-          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL"]",
         },
       },
       "www 🔨 docker | prod ": {
@@ -1178,6 +1238,22 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_DIR="www"",
+          "export DOCKER_DIR="."",
+          "export DOCKER_REGISTRY="$CI_REGISTRY"",
+          "export DOCKER_CACHE_IMAGE="$CI_REGISTRY_IMAGE/caches/www"",
+          "export DOCKER_IMAGE_NAME="prod/www"",
+          "export DOCKER_IMAGE="$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"",
+          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
+          "export DOCKER_COPY_AND_INSTALL_APP="COPY --chown=node:node $APP_DIR .
+RUN yarn plugin import workspace-tools
+RUN yarn workspaces focus --production && yarn rebuild"",
+          "export DOCKER_COPY_WORKSPACE_FILES="COPY --chown=node:node www/package.json /app/www/package.json
+COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
+COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
+COPY --chown=node:node .yarn /app/.yarn"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "ensureNodeDockerfile",
           "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
           "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
@@ -1201,25 +1277,9 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "build",
         "variables": {
-          "APP_DIR": "www",
-          "DOCKERFILE_ADDITIONS": undefined,
-          "DOCKERFILE_ADDITIONS_END": undefined,
           "DOCKER_BUILDKIT": "1",
-          "DOCKER_CACHE_IMAGE": "$CI_REGISTRY_IMAGE/caches/www",
-          "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
-RUN yarn plugin import workspace-tools
-RUN yarn workspaces focus --production && yarn rebuild",
-          "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
-COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
-COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
-COPY --chown=node:node .yarn /app/.yarn",
-          "DOCKER_DIR": ".",
           "DOCKER_DRIVER": "overlay2",
           "DOCKER_HOST": "tcp://0.0.0.0:2375",
-          "DOCKER_IMAGE": "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME",
-          "DOCKER_IMAGE_NAME": "prod/www",
-          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
-          "DOCKER_REGISTRY": "$CI_REGISTRY",
           "DOCKER_TLS_CERTDIR": "",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "2Gi",
@@ -1249,6 +1309,22 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export APP_DIR="www"",
+          "export DOCKER_DIR="."",
+          "export DOCKER_REGISTRY="$CI_REGISTRY"",
+          "export DOCKER_CACHE_IMAGE="$CI_REGISTRY_IMAGE/caches/www"",
+          "export DOCKER_IMAGE_NAME="stage/www"",
+          "export DOCKER_IMAGE="$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"",
+          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
+          "export DOCKER_COPY_AND_INSTALL_APP="COPY --chown=node:node $APP_DIR .
+RUN yarn plugin import workspace-tools
+RUN yarn workspaces focus --production && yarn rebuild"",
+          "export DOCKER_COPY_WORKSPACE_FILES="COPY --chown=node:node www/package.json /app/www/package.json
+COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
+COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
+COPY --chown=node:node .yarn /app/.yarn"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "ensureNodeDockerfile",
           "echo -e "\\e[0Ksection_start:$(date +%s):docker-login[collapsed=true]\\r\\e[0KDocker Login"",
           "docker login --username gitlab-ci-token --password $CI_JOB_TOKEN $CI_REGISTRY",
@@ -1272,25 +1348,9 @@ COPY --chown=node:node .yarn /app/.yarn",
         ],
         "stage": "build",
         "variables": {
-          "APP_DIR": "www",
-          "DOCKERFILE_ADDITIONS": undefined,
-          "DOCKERFILE_ADDITIONS_END": undefined,
           "DOCKER_BUILDKIT": "1",
-          "DOCKER_CACHE_IMAGE": "$CI_REGISTRY_IMAGE/caches/www",
-          "DOCKER_COPY_AND_INSTALL_APP": "COPY --chown=node:node $APP_DIR .
-RUN yarn plugin import workspace-tools
-RUN yarn workspaces focus --production && yarn rebuild",
-          "DOCKER_COPY_WORKSPACE_FILES": "COPY --chown=node:node www/package.json /app/www/package.json
-COPY --chown=node:node www/yarn.lock /app/www/yarn.lock
-COPY --chown=node:node .yarnrc.yml /app/.yarnrc.yml
-COPY --chown=node:node .yarn /app/.yarn",
-          "DOCKER_DIR": ".",
           "DOCKER_DRIVER": "overlay2",
           "DOCKER_HOST": "tcp://0.0.0.0:2375",
-          "DOCKER_IMAGE": "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME",
-          "DOCKER_IMAGE_NAME": "stage/www",
-          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
-          "DOCKER_REGISTRY": "$CI_REGISTRY",
           "DOCKER_TLS_CERTDIR": "",
           "KUBERNETES_CPU_REQUEST": "0.5",
           "KUBERNETES_MEMORY_LIMIT": "2Gi",
@@ -1299,12 +1359,17 @@ COPY --chown=node:node .yarn /app/.yarn",
       },
       "www 🚀 Deploy | prod ": {
         "allow_failure": true,
+        "artifacts": {
+          "reports": {
+            "dotenv": "gitlab_environment.env",
+          },
+        },
         "cache": [],
         "environment": {
           "auto_stop_in": undefined,
           "name": "prod/www",
           "on_stop": "www 🛑 Stop ⚠️ | prod ",
-          "url": "https://unknown-host.example.com",
+          "url": "$CL_GITLAB_ENVIRONMENT_URL",
         },
         "image": "path/to/docker/jobs-default:the-version",
         "interruptible": true,
@@ -1335,43 +1400,52 @@ COPY --chown=node:node .yarn /app/.yarn",
           },
         ],
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export ENV_SHORT="prod"",
+          "export APP_DIR="www"",
+          "export ENV_TYPE="prod"",
+          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
+          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
+          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\///'); [ -z "$tag" ] && echo "v0.0.0" || echo "$tag")"",
+          "export HOST="unknown-host.example.com"",
+          "export ROOT_URL="https://unknown-host.example.com"",
+          "export HOST_INTERNAL="unknown-host.example.com"",
+          "export HOST_CANONICAL="unknown-host.example.com"",
+          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
+          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\"]"",
+          "export DOCKER_REGISTRY="$CI_REGISTRY"",
+          "export DOCKER_CACHE_IMAGE="$CI_REGISTRY_IMAGE/caches/www"",
+          "export DOCKER_IMAGE_NAME="prod/www"",
+          "export DOCKER_IMAGE="$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"",
+          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
+          "export DEPLOY_API_KEY="$CL_prod_www_DEPLOY_API_KEY"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "cd www",
           "echo 'would deploy'",
           "echo Uploading SBOM to Dependency Track",
           "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://unknown-host.example.com" "__sbom.json" vex.json || true",
+          "echo "CL_GITLAB_ENVIRONMENT_URL=https://unknown-host.example.com" >> gitlab_environment.env",
         ],
         "stage": "deploy prod",
         "variables": {
-          "APP_DIR": "www",
-          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
-          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
-          "BUILD_INFO_ID": "some-id",
-          "DEPLOY_API_KEY": "$CL_prod_www_DEPLOY_API_KEY",
-          "DOCKER_CACHE_IMAGE": "$CI_REGISTRY_IMAGE/caches/www",
-          "DOCKER_IMAGE": "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME",
-          "DOCKER_IMAGE_NAME": "prod/www",
-          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
-          "DOCKER_REGISTRY": "$CI_REGISTRY",
-          "ENV_SHORT": "prod",
-          "ENV_TYPE": "prod",
-          "HOST": "unknown-host.example.com",
-          "HOST_CANONICAL": "unknown-host.example.com",
           "KUBERNETES_CPU_REQUEST": "1",
           "KUBERNETES_MEMORY_LIMIT": "2048Mi",
           "KUBERNETES_MEMORY_REQUEST": "1024Mi",
-          "ROOT_URL": "https://unknown-host.example.com",
-          "ROOT_URL_INTERNAL": "https://unknown-host.example.com",
-          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL"]",
         },
       },
       "www 🚀 Deploy | stage ": {
         "allow_failure": false,
+        "artifacts": {
+          "reports": {
+            "dotenv": "gitlab_environment.env",
+          },
+        },
         "cache": [],
         "environment": {
           "auto_stop_in": undefined,
           "name": "stage/www",
           "on_stop": "www 🛑 Stop ⚠️ | stage ",
-          "url": "https://unknown-host.example.com",
+          "url": "$CL_GITLAB_ENVIRONMENT_URL",
         },
         "image": "path/to/docker/jobs-default:the-version",
         "interruptible": true,
@@ -1402,40 +1476,50 @@ COPY --chown=node:node .yarn /app/.yarn",
           },
         ],
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export ENV_SHORT="stage"",
+          "export APP_DIR="www"",
+          "export ENV_TYPE="stage"",
+          "export BUILD_INFO_BUILD_ID="$(git describe --tags 2>/dev/null || git rev-parse HEAD)"",
+          "export BUILD_INFO_BUILD_TIME="$CI_JOB_STARTED_AT"",
+          "export BUILD_INFO_CURRENT_VERSION="$(tag=$(git ls-remote origin "refs/tags/v*[0-9]" 2>/dev/null | cut -f 2- | sort -V | tail -1 | sed 's/refs\\/tags\\///'); [ -z "$tag" ] && echo "v0.0.0" || echo "$tag")"",
+          "export HOST="unknown-host.example.com"",
+          "export ROOT_URL="https://unknown-host.example.com"",
+          "export HOST_INTERNAL="unknown-host.example.com"",
+          "export HOST_CANONICAL="unknown-host.example.com"",
+          "export ROOT_URL_INTERNAL="https://unknown-host.example.com"",
+          "export _ALL_ENV_VAR_KEYS="[\\"ENV_SHORT\\",\\"APP_DIR\\",\\"ENV_TYPE\\",\\"BUILD_INFO_BUILD_ID\\",\\"BUILD_INFO_BUILD_TIME\\",\\"BUILD_INFO_CURRENT_VERSION\\",\\"HOST\\",\\"ROOT_URL\\",\\"HOST_INTERNAL\\",\\"HOST_CANONICAL\\",\\"ROOT_URL_INTERNAL\\"]"",
+          "export DOCKER_REGISTRY="$CI_REGISTRY"",
+          "export DOCKER_CACHE_IMAGE="$CI_REGISTRY_IMAGE/caches/www"",
+          "export DOCKER_IMAGE_NAME="stage/www"",
+          "export DOCKER_IMAGE="$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME"",
+          "export DOCKER_IMAGE_TAG="$CI_COMMIT_SHA"",
+          "export DEPLOY_API_KEY="$CL_stage_www_DEPLOY_API_KEY"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "cd www",
           "echo 'would deploy'",
           "echo Uploading SBOM to Dependency Track",
           "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" upload "pan-test-app/www" "https://unknown-host.example.com" "__sbom.json" vex.json || true",
+          "echo "CL_GITLAB_ENVIRONMENT_URL=https://unknown-host.example.com" >> gitlab_environment.env",
         ],
         "stage": "deploy stage",
         "variables": {
-          "APP_DIR": "www",
-          "BUILD_INFO_BUILD_TIME": "01-01-2023 12:13:14",
-          "BUILD_INFO_CURRENT_VERSION": "3.2.1",
-          "BUILD_INFO_ID": "some-id",
-          "DEPLOY_API_KEY": "$CL_stage_www_DEPLOY_API_KEY",
-          "DOCKER_CACHE_IMAGE": "$CI_REGISTRY_IMAGE/caches/www",
-          "DOCKER_IMAGE": "$CI_REGISTRY_IMAGE/$DOCKER_IMAGE_NAME",
-          "DOCKER_IMAGE_NAME": "stage/www",
-          "DOCKER_IMAGE_TAG": "$CI_COMMIT_SHA",
-          "DOCKER_REGISTRY": "$CI_REGISTRY",
-          "ENV_SHORT": "stage",
-          "ENV_TYPE": "stage",
-          "HOST": "unknown-host.example.com",
-          "HOST_CANONICAL": "unknown-host.example.com",
           "KUBERNETES_CPU_REQUEST": "1",
           "KUBERNETES_MEMORY_LIMIT": "2048Mi",
           "KUBERNETES_MEMORY_REQUEST": "1024Mi",
-          "ROOT_URL": "https://unknown-host.example.com",
-          "ROOT_URL_INTERNAL": "https://unknown-host.example.com",
-          "_ALL_ENV_VAR_KEYS": "["ENV_SHORT","APP_DIR","ENV_TYPE","BUILD_INFO_ID","BUILD_INFO_BUILD_TIME","BUILD_INFO_CURRENT_VERSION","HOST","ROOT_URL","HOST_CANONICAL","ROOT_URL_INTERNAL"]",
         },
       },
       "www 🛑 Stop ⚠️ | prod ": {
+        "allow_failure": true,
+        "artifacts": {
+          "reports": {
+            "dotenv": "gitlab_environment.env",
+          },
+        },
         "environment": {
           "action": "stop",
           "name": "prod/www",
-          "url": "https://unknown-host.example.com",
+          "url": "$CL_GITLAB_ENVIRONMENT_URL",
         },
         "image": "path/to/docker/jobs-default:the-version",
         "interruptible": true,
@@ -1449,34 +1533,41 @@ COPY --chown=node:node .yarn /app/.yarn",
         },
         "rules": [
           {
-            "allow_failure": true,
             "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
             "when": "on_success",
           },
           {
-            "allow_failure": true,
             "when": "manual",
           },
         ],
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export DEPLOY_API_KEY="$CL_prod_www_DEPLOY_API_KEY"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "echo 'would stop'",
           "echo Disabling component in Dependency Track",
           "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://unknown-host.example.com" || true",
+          "echo "CL_GITLAB_ENVIRONMENT_URL=https://unknown-host.example.com" >> gitlab_environment.env",
         ],
         "stage": "stop prod",
         "variables": {
-          "DEPLOY_API_KEY": "$CL_prod_www_DEPLOY_API_KEY",
           "GIT_STRATEGY": "none",
-          "KUBERNETES_CPU_REQUEST": "1",
-          "KUBERNETES_MEMORY_LIMIT": "2048Mi",
-          "KUBERNETES_MEMORY_REQUEST": "1024Mi",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
         },
       },
       "www 🛑 Stop ⚠️ | stage ": {
+        "allow_failure": true,
+        "artifacts": {
+          "reports": {
+            "dotenv": "gitlab_environment.env",
+          },
+        },
         "environment": {
           "action": "stop",
           "name": "stage/www",
-          "url": "https://unknown-host.example.com",
+          "url": "$CL_GITLAB_ENVIRONMENT_URL",
         },
         "image": "path/to/docker/jobs-default:the-version",
         "interruptible": true,
@@ -1490,27 +1581,28 @@ COPY --chown=node:node .yarn /app/.yarn",
         },
         "rules": [
           {
-            "allow_failure": true,
             "if": "$CI_COMMIT_BRANCH =~ /^[0-9]+\\.([0-9]+|x)\\.x$/",
             "when": "on_success",
           },
           {
-            "allow_failure": true,
             "when": "manual",
           },
         ],
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "export DEPLOY_API_KEY="$CL_stage_www_DEPLOY_API_KEY"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "echo 'would stop'",
           "echo Disabling component in Dependency Track",
           "/dtrackuploader https://dep.panter.swiss/ "$DT_KEY_PROD" disable "pan-test-app/www" "https://unknown-host.example.com" || true",
+          "echo "CL_GITLAB_ENVIRONMENT_URL=https://unknown-host.example.com" >> gitlab_environment.env",
         ],
         "stage": "stop stage",
         "variables": {
-          "DEPLOY_API_KEY": "$CL_stage_www_DEPLOY_API_KEY",
           "GIT_STRATEGY": "none",
-          "KUBERNETES_CPU_REQUEST": "1",
-          "KUBERNETES_MEMORY_LIMIT": "2048Mi",
-          "KUBERNETES_MEMORY_REQUEST": "1024Mi",
+          "KUBERNETES_CPU_REQUEST": "0.5",
+          "KUBERNETES_MEMORY_LIMIT": "400Mi",
+          "KUBERNETES_MEMORY_REQUEST": "200Mi",
         },
       },
       "www 🧾 sbom | prod ": {
@@ -1531,6 +1623,8 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
         ],
         "stage": "build",
@@ -1554,6 +1648,8 @@ COPY --chown=node:node .yarn /app/.yarn",
           ],
         },
         "script": [
+          "echo -e "\\e[0Ksection_start:$(date +%s):injectvars[collapsed=true]\\r\\e[0KInjecting variables"",
+          "echo -e "\\e[0Ksection_end:$(date +%s):injectvars\\r\\e[0K"",
           "trivy fs --quiet --format cyclonedx --output "__sbom.json" www",
         ],
         "stage": "build",
@@ -1606,7 +1702,7 @@ COPY --chown=node:node .yarn /app/.yarn",
     ],
     "variables": {
       "FF_USE_FASTZIP": "true",
-      "GIT_DEPTH": 1,
+      "GIT_DEPTH": "1",
     },
     "workflow": {
       "rules": [