mirror of
https://git.proxmox.com/git/libgit2
synced 2025-10-31 21:35:31 +00:00
18c18e3df8
When running a Coverity build, we have to provide an authentication token in order to proof that we are actually allowed to run analysis in the name of a certain project. As this token should be secret, it is only set on the main repository, so when we were requested to run the Coverity script on another repository we do error out. But in fact we do also error out if the Coverity analysis should _not_ be run if there is no authentication token provided. Fix the issue by only checking for the authentication token after determining if analysis is indeed requested.
72 lines
1.8 KiB
Bash
Executable File
72 lines
1.8 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
# Only run this on our branches
|
|
echo "Branch: $TRAVIS_BRANCH | Pull request: $TRAVIS_PULL_REQUEST | Slug: $TRAVIS_REPO_SLUG"
|
|
if [ "$TRAVIS_BRANCH" != "master" -o "$TRAVIS_PULL_REQUEST" != "false" -o "$TRAVIS_REPO_SLUG" != "libgit2/libgit2" ];
|
|
then
|
|
echo "Only analyzing the 'master' brach of the main repository."
|
|
exit 0
|
|
fi
|
|
|
|
# Environment check
|
|
[ -z "$COVERITY_TOKEN" ] && echo "Need to set a coverity token" && exit 1
|
|
|
|
case $(uname -m) in
|
|
i?86) BITS=32 ;;
|
|
amd64|x86_64) BITS=64 ;;
|
|
esac
|
|
SCAN_TOOL=https://scan.coverity.com/download/cxx/linux${BITS}
|
|
TOOL_BASE=$(pwd)/_coverity-scan
|
|
|
|
# Install coverity tools
|
|
if [ ! -d "$TOOL_BASE" ]; then
|
|
echo "Downloading coverity..."
|
|
mkdir -p "$TOOL_BASE"
|
|
pushd "$TOOL_BASE"
|
|
wget -O coverity_tool.tgz $SCAN_TOOL \
|
|
--post-data "project=libgit2&token=$COVERITY_TOKEN"
|
|
tar xzf coverity_tool.tgz
|
|
popd
|
|
TOOL_DIR=$(find "$TOOL_BASE" -type d -name 'cov-analysis*')
|
|
ln -s "$TOOL_DIR" "$TOOL_BASE"/cov-analysis
|
|
fi
|
|
|
|
cp script/user_nodefs.h "$TOOL_BASE"/cov-analysis/config/user_nodefs.h
|
|
|
|
COV_BUILD="$TOOL_BASE/cov-analysis/bin/cov-build"
|
|
|
|
# Configure and build
|
|
rm -rf _build
|
|
mkdir _build
|
|
cd _build
|
|
cmake .. -DTHREADSAFE=ON
|
|
COVERITY_UNSUPPORTED=1 \
|
|
$COV_BUILD --dir cov-int \
|
|
cmake --build .
|
|
|
|
# Upload results
|
|
tar czf libgit2.tgz cov-int
|
|
SHA=$(git rev-parse --short HEAD)
|
|
|
|
HTML="$(curl \
|
|
--silent \
|
|
--write-out "\n%{http_code}" \
|
|
--form token="$COVERITY_TOKEN" \
|
|
--form email=bs@github.com \
|
|
--form file=@libgit2.tgz \
|
|
--form version="$SHA" \
|
|
--form description="Travis build" \
|
|
https://scan.coverity.com/builds?project=libgit2)"
|
|
# Body is everything up to the last line
|
|
BODY="$(echo "$HTML" | head -n-1)"
|
|
# Status code is the last line
|
|
STATUS_CODE="$(echo "$HTML" | tail -n1)"
|
|
|
|
echo "${BODY}"
|
|
|
|
if [ "${STATUS_CODE}" != "201" ]; then
|
|
echo "Received error code ${STATUS_CODE} from Coverity"
|
|
exit 1
|
|
fi
|