RepoMirrors
/
haproxy
mirror of http://git.haproxy.org/git/haproxy.git/
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
haproxy/.github/workflows/coverity.yml

44 lines
1.6 KiB
YAML
Raw Normal View History

CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
#
# scan results: https://scan.coverity.com/projects/haproxy
#
name: Coverity
on:
schedule:
- cron: "0 0 * * *"
CI: Add `permissions` to GitHub Actions This change locks down the permissions of the access token in GitHub Actions to only allow reading the repository contents and nothing else. see https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
2021-10-16 16:10:26 +00:00
permissions:
contents: read
CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
jobs:
scan:
runs-on: ubuntu-latest
if: ${{ github.repository_owner == 'haproxy' }}
env:
COVERITY_SCAN_PROJECT_NAME: 'Haproxy'
COVERITY_SCAN_BRANCH_PATTERN: '*'
COVERITY_SCAN_NOTIFICATION_EMAIL: 'chipitsine@gmail.com'
CI: coverity: simplify debugging options We used to rely on a call to "sed" to modify the DEBUG option in the makefile when running under Coverity because it splits words around spaces and does not allow to pass multi-word build options. As reported by Tim in issue #1592, this broke with commit 8de7f2822 ("BUILD: makefile: enable both DEBUG_STRICT and DEBUG_MEMORY_POOLS by default") when the default DEBUG options changed. Let's change this to pass all DEBUG options one at a time instead and get rid of this sed.
2022-03-04 09:12:40 +00:00
# We cannot pass the DEBUG at once here because Coverity splits
# parameters at whitespaces, without taking quoting into account.
COVERITY_SCAN_BUILD_COMMAND: "make CC=clang TARGET=linux-glibc USE_ZLIB=1 USE_PCRE=1 USE_PCRE_JIT=1 USE_LUA=1 USE_OPENSSL=1 USE_QUIC=1 USE_SYSTEMD=1 USE_WURFL=1 WURFL_INC=addons/wurfl/dummy WURFL_LIB=addons/wurfl/dummy USE_DEVICEATLAS=1 DEVICEATLAS_SRC=addons/deviceatlas/dummy USE_51DEGREES=1 51DEGREES_SRC=addons/51degrees/dummy/pattern ADDLIB=\"-Wl,-rpath,$HOME/opt/lib/\" SSL_LIB=${HOME}/opt/lib SSL_INC=${HOME}/opt/include DEBUG+=-DDEBUG_STRICT=1 DEBUG+=-DDEBUG_USE_ABORT=1"
CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
steps:
CI: Update to actions/checkout@v3 No functional change, but we should keep this current.
2022-04-09 20:08:41 +00:00
- uses: actions/checkout@v3
CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
- name: Install apt dependencies
run: |
sudo apt-get update
sudo apt-get install -y \
liblua5.3-dev \
libsystemd-dev
CI: enable QUIC for Coverity scan
2022-02-02 05:24:58 +00:00
- name: Install QUICTLS
run: |
QUICTLS=yes scripts/build-ssl.sh
CI: Fix the coverity builds In an attempt to fix the use of DEBUG_STRICT commit 7f0f4786d1927f1450392e871480e3122796024e unfortunately broke the Coverity builds completely. It turns out that Coverity does not properly handle quoting within `COVERITY_SCAN_BUILD_COMMAND`, instead breaking up single arguments at whitespace, thus passing `-DDEBUG_USE_ABORT=1` to `make` as-is. Fix this issue by hijacking the Makefile within the Coverity workflow. We simply replace the default value of the `DEBUG` option with whatever values we need. The build command now only includes the TARGET and USE_* flags, each of which works without any spaces.
2021-01-28 17:58:53 +00:00
- name: Build WURFL
CONTRIB: move src/wurfl.c and contrib/wurfl to addons/wurfl Both the source file and the dummy library are now at the same place. Maybe the build howto could be moved there as well to make things even cleaner. The Makefile, MAINTAINERS, doc, and vtest matrix were updated.
2021-04-02 14:39:44 +00:00
run: make -C addons/wurfl/dummy
CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
- name: Run Coverity Scan
env:
COVERITY_SCAN_TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}
run: |
curl -fsSL "https://scan.coverity.com/scripts/travisci_build_coverity_scan.sh" | bash || true