1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
name: Coverity Scan
on:
push:
branches:
- coverity_scan
schedule:
- cron: '13 4 */2 * *'
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-24.04
env:
COVERITY_SCAN_TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}
COVERITY_SCAN_PROG_URL: https://scan.coverity.com/download/cxx/linux64
COVERITY_SCAN_PROJECT_NAME: sipwise/rtpengine
COVERITY_SCAN_NOTIFICATION_EMAIL: development@sipwise.com
steps:
- name: Checkout source
uses: actions/checkout@v4
- name: Update APT cache
run: |
sudo apt-get update
- name: Get build dependencies
run: |
echo "Generating Debian source for usage on Ubuntu/noble / ubuntu-24.04"
cd pkg/deb/
./generator.sh
./backports/noble
rm -rf debian
mv noble debian
echo "Installing Debian packages"
sudo apt-get install -q -y --no-install-recommends git ca-certificates curl
sudo apt-get build-dep -q -y .
- name: Get coverity scan
run: |
curl -o cov-analysis.tgz \
$COVERITY_SCAN_PROG_URL \
--form project=$COVERITY_SCAN_PROJECT_NAME \
--form token=$COVERITY_SCAN_TOKEN
tar xfz cov-analysis.tgz
# We need to disable glib deprecation warnings, as coverity-scan does
# not support __attributes__ in enums.
- name: Analyze
run: |
CPPFLAGS="-DGLIB_DISABLE_DEPRECATION_WARNINGS" \
cov-analysis-*/bin/cov-build --dir cov-int make -j4 coverity
- name: Submit result
run: |
tar cfz cov-int.tar.gz cov-int
curl \
https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME \
--form token=$COVERITY_SCAN_TOKEN \
--form email=$COVERITY_SCAN_NOTIFICATION_EMAIL \
--form file=@cov-int.tar.gz \
--form version="`git describe --tags --always`" \
--form description="`git describe --tags --always` / $CI_COMMIT_TITLE / $CI_COMMIT_REF_NAME:$CI_PIPELINE_ID"
|
