3 Commits

Author	SHA1	Message	Date
Paolo Bonzini	2e90470e90	run-coverity-scan: download tools outside the container ... This lets us look at coverity_tool.md5 across executions of run-coverity-scan and skip the download. Reviewed-by: Peter Maydell <peter.maydell@linaro.org> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>	2020-06-10 12:09:33 -04:00
Paolo Bonzini	7265905940	run-coverity-scan: use docker.py ... Our trusted docker wrapper allows run-coverity-scan to run with both docker and podman. For the "run" phase this is transparent; for the "build" phase however scripts are replaced with a bind mount (-v). This is not an issue because the secret option is meant for secrets stored globally in the system and bind mounts are a valid substitute for secrets that are known to whoever builds the container. Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>	2020-06-10 12:09:32 -04:00
Peter Maydell	9edfa3580f	scripts/coverity-scan: Add Docker support ... Add support for running the Coverity Scan tools inside a Docker container rather than directly on the host system. Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Message-id: 20200319193323.2038-7-peter.maydell@linaro.org	2020-04-14 13:15:40 +01:00