thodg/libgit2/script/coverity.sh

• Show log

  Commit

• Hash : 18c18e3d
  Author :
  Date : 2016-10-31T15:55:46
  

  coverity: check for Coverity token only if necessary
  
  When running a Coverity build, we have to provide an
  authentication token in order to proof that we are actually
  allowed to run analysis in the name of a certain project. As this
  token should be secret, it is only set on the main repository, so
  when we were requested to run the Coverity script on another
  repository we do error out. But in fact we do also error out if
  the Coverity analysis should _not_ be run if there is no
  authentication token provided.
  
  Fix the issue by only checking for the authentication token after
  determining if analysis is indeed requested.
  

Download

• script/coverity.sh

• #!/bin/bash
  set -e
  
  # Only run this on our branches
  echo "Branch: $TRAVIS_BRANCH  |  Pull request: $TRAVIS_PULL_REQUEST  |  Slug: $TRAVIS_REPO_SLUG"
  if [ "$TRAVIS_BRANCH" != "master" -o "$TRAVIS_PULL_REQUEST" != "false" -o "$TRAVIS_REPO_SLUG" != "libgit2/libgit2" ];
  then
  	echo "Only analyzing the 'master' brach of the main repository."
  	exit 0
  fi
  
  # Environment check
  [ -z "$COVERITY_TOKEN" ] && echo "Need to set a coverity token" && exit 1
  
  case $(uname -m) in
  	i?86)				BITS=32 ;;
  	amd64|x86_64)	BITS=64 ;;
  esac
  SCAN_TOOL=https://scan.coverity.com/download/cxx/linux${BITS}
  TOOL_BASE=$(pwd)/_coverity-scan
  
  # Install coverity tools
  if [ ! -d "$TOOL_BASE" ]; then
  	echo "Downloading coverity..."
  	mkdir -p "$TOOL_BASE"
  	pushd "$TOOL_BASE"
  	wget -O coverity_tool.tgz $SCAN_TOOL \
  		--post-data "project=libgit2&token=$COVERITY_TOKEN"
  	tar xzf coverity_tool.tgz
  	popd
  	TOOL_DIR=$(find "$TOOL_BASE" -type d -name 'cov-analysis*')
  	ln -s "$TOOL_DIR" "$TOOL_BASE"/cov-analysis
  fi
  
  cp script/user_nodefs.h "$TOOL_BASE"/cov-analysis/config/user_nodefs.h
  
  COV_BUILD="$TOOL_BASE/cov-analysis/bin/cov-build"
  
  # Configure and build
  rm -rf _build
  mkdir _build
  cd _build
  cmake .. -DTHREADSAFE=ON
  COVERITY_UNSUPPORTED=1 \
  	$COV_BUILD --dir cov-int \
  	cmake --build .
  
  # Upload results
  tar czf libgit2.tgz cov-int
  SHA=$(git rev-parse --short HEAD)
  
  HTML="$(curl \
  	--silent \
  	--write-out "\n%{http_code}" \
  	--form token="$COVERITY_TOKEN" \
  	--form email=bs@github.com \
  	--form file=@libgit2.tgz \
  	--form version="$SHA" \
  	--form description="Travis build" \
  	https://scan.coverity.com/builds?project=libgit2)"
  # Body is everything up to the last line
  BODY="$(echo "$HTML" | head -n-1)"
  # Status code is the last line
  STATUS_CODE="$(echo "$HTML" | tail -n1)"
  
  echo "${BODY}"
  
  if [ "${STATUS_CODE}" != "201" ]; then
  	echo "Received error code ${STATUS_CODE} from Coverity"
  	exit 1
  fi
  

Download