Browse Source

add coverity scan to travis-ci matrix

Ilya Shipitsin 7 years ago
parent
commit
5fc6b10fe1
2 changed files with 24 additions and 1 deletions
  1. 17 0
      .ci/coverity.sh
  2. 7 1
      .travis.yml

+ 17 - 0
.ci/coverity.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+set -eu
+
+RUN_COVERITY="${RUN_COVERITY:-0}"
+
+export COVERITY_SCAN_PROJECT_NAME="SoftEtherVPN/SoftEtherVPN"
+export COVERITY_SCAN_BRANCH_PATTERN="coverity"
+export COVERITY_SCAN_NOTIFICATION_EMAIL="[email protected]"
+export COVERITY_SCAN_BUILD_COMMAND_PREPEND="./configure"
+export COVERITY_SCAN_BUILD_COMMAND="make -C tmp"
+
+if [ "${RUN_COVERITY}" = "1" ]; then
+    # Ignore exit code, script exits with 1 if we're not on the right branch
+    curl -s "https://scan.coverity.com/scripts/travisci_build_coverity_scan.sh" | bash || true
+else
+    echo "Skipping coverity scan because \$RUN_COVERITY != \"1\""
+fi

+ 7 - 1
.travis.yml

@@ -5,6 +5,9 @@ language: c
 env:
   global:
     - OPENSSL_INSTALL_DIR="${HOME}/opt"
+    # The next declaration is the encrypted COVERITY_SCAN_TOKEN, created
+    #   via the "travis encrypt" command using the project repo's public key
+    - secure: "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"
 
 matrix:
   include:
@@ -14,7 +17,7 @@ matrix:
     - env: OPENSSL_VERSION="1.1.0f"
       os: linux
       compiler: gcc
-    - env: OPENSSL_VERSION="1.0.2o"
+    - env: OPENSSL_VERSION="1.0.2o" RUN_COVERITY="1"
       os: linux
       compiler: clang
     - env: OPENSSL_VERSION="1.1.0f"
@@ -44,6 +47,9 @@ cache:
 before_install:
   - bash .ci/build-openssl.sh > build-deps.log 2>&1 || (cat build-deps.log && exit 1)
 
+before_script:
+  - .ci/coverity.sh
+
 script:
   - export OPENSSL_ROOT_DIR=${OPENSSL_INSTALL_DIR}
   - export LD_LIBRARY_PATH="${HOME}/opt/lib:${LD_LIBRARY_PATH:-}"