thodg/libgit2/script/coverity.sh

• Show log

  Commit

• Hash : 561276ee
  Author :
  Date : 2016-10-28T14:48:30
  

  coverity: only analyze the master branch of the main repository We used to only execute Coverity analysis on the 'development' branch before commit 998f001 (Refine build limitation, 2014-01-15), which refined Coverity build limitations. While we do not really use the 'development' branch anymore, it does still make sense to only analyze a single branch, as otherwise Coverity might get confused. Re-establish the restriction such that we only analyze libgit2's 'master' branch. Also fix the message announcing why we do not actually analyze a certain build.

Download

• script/coverity.sh

• #!/bin/bash
  set -e
  
  # Environment check
  [ -z "$COVERITY_TOKEN" ] && echo "Need to set a coverity token" && exit 1
  
  # Only run this on our branches
  echo "Branch: $TRAVIS_BRANCH  |  Pull request: $TRAVIS_PULL_REQUEST  |  Slug: $TRAVIS_REPO_SLUG"
  if [ "$TRAVIS_BRANCH" != "master" -o "$TRAVIS_PULL_REQUEST" != "false" -o "$TRAVIS_REPO_SLUG" != "libgit2/libgit2" ];
  then
  	echo "Only analyzing the 'master' brach of the main repository."
  	exit 0
  fi
  
  case $(uname -m) in
  	i?86)				BITS=32 ;;
  	amd64|x86_64)	BITS=64 ;;
  esac
  SCAN_TOOL=https://scan.coverity.com/download/cxx/linux${BITS}
  TOOL_BASE=$(pwd)/_coverity-scan
  
  # Install coverity tools
  if [ ! -d "$TOOL_BASE" ]; then
  	echo "Downloading coverity..."
  	mkdir -p "$TOOL_BASE"
  	pushd "$TOOL_BASE"
  	wget -O coverity_tool.tgz $SCAN_TOOL \
  		--post-data "project=libgit2&token=$COVERITY_TOKEN"
  	tar xzf coverity_tool.tgz
  	popd
  	TOOL_DIR=$(find "$TOOL_BASE" -type d -name 'cov-analysis*')
  	ln -s "$TOOL_DIR" "$TOOL_BASE"/cov-analysis
  fi
  
  cp script/user_nodefs.h "$TOOL_BASE"/cov-analysis/config/user_nodefs.h
  
  COV_BUILD="$TOOL_BASE/cov-analysis/bin/cov-build"
  
  # Configure and build
  rm -rf _build
  mkdir _build
  cd _build
  cmake .. -DTHREADSAFE=ON
  COVERITY_UNSUPPORTED=1 \
  	$COV_BUILD --dir cov-int \
  	cmake --build .
  
  # Upload results
  tar czf libgit2.tgz cov-int
  SHA=$(git rev-parse --short HEAD)
  
  HTML="$(curl \
  	--silent \
  	--write-out "\n%{http_code}" \
  	--form token="$COVERITY_TOKEN" \
  	--form email=bs@github.com \
  	--form file=@libgit2.tgz \
  	--form version="$SHA" \
  	--form description="Travis build" \
  	https://scan.coverity.com/builds?project=libgit2)"
  # Body is everything up to the last line
  BODY="$(echo "$HTML" | head -n-1)"
  # Status code is the last line
  STATUS_CODE="$(echo "$HTML" | tail -n1)"
  
  echo "${BODY}"
  
  if [ "${STATUS_CODE}" != "201" ]; then
  	echo "Received error code ${STATUS_CODE} from Coverity"
  	exit 1
  fi
  

Download