diff options
| author | Tony Josi <tonyjosi@amazon.com> | 2023-10-26 08:57:45 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-10-26 08:57:45 +0300 |
| commit | 5281427a9942bf12d35240d388fcfe60fa7dd682 (patch) | |
| tree | c99d4c1ecd49df6a748b42c30ad37e8d09a78d49 /.github | |
| parent | 4ef0bb676cd4114ab21d21d03f31b4eb17d97a70 (diff) | |
Add nightly coverity scan (#859)
* coverity scan job
* coverity scan badge in readme
* Update cron schedule
* revert adding badge
* update description
* updating review feedback
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/coverity_scan.yml | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/.github/workflows/coverity_scan.yml b/.github/workflows/coverity_scan.yml new file mode 100644 index 000000000..6f492d7fd --- /dev/null +++ b/.github/workflows/coverity_scan.yml @@ -0,0 +1,46 @@ +name: FreeRTOS-Kernel Coverity Scan +on: + schedule: ## Scheduled to run at 1:15 AM UTC daily. + - cron: '15 1 * * *' + + +jobs: + + Coverity-Scan: + name: Coverity Scan + runs-on: ubuntu-latest + steps: + - name: Checkout the Repository + uses: actions/checkout@v3 + + - name: Install Build Essentials + shell: bash + run: | + sudo apt-get -y update + sudo apt-get -y install build-essential + + - name: Install Coverity Build + shell: bash + env: + COVERITY_TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }} + run: | + wget -nv -qO- https://scan.coverity.com/download/linux64 --post-data "token=${COVERITY_TOKEN}&project=FreeRTOS-Kernel" | tar -zx --one-top-level=cov_scan --strip-components 1 + echo "cov_scan_path=$(pwd)/cov_scan/bin" >> $GITHUB_ENV + + - name: Coverity Build & Upload for Scan + shell: bash + env: + COVERITY_TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }} + run: | + export PATH="$PATH:${{env.cov_scan_path}}" + cmake -S ./examples/cmake_example/ -B build + cd build + cov-build --dir cov-int make -j + tar czvf gcc_freertos_kerenl_sample_build.tgz cov-int + COV_SCAN_UPLOAD_STATUS=$(curl --form token=${COVERITY_TOKEN} \ + --form email=tonyjosi@amazon.com \ + --form file=@gcc_freertos_kerenl_sample_build.tgz \ + --form version="Mainline" \ + --form description="FreeRTOS Kernel Nightly Scan" \ + https://scan.coverity.com/builds?project=FreeRTOS-Kernel) + echo "${COV_SCAN_UPLOAD_STATUS}" | grep -q -e 'Build successfully submitted' || echo >&2 "Error submitting build for analysis: ${COV_SCAN_UPLOAD_STATUS}" |