RepoMirrors
/
haproxy
mirror of http://git.haproxy.org/git/haproxy.git/
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
haproxy/.github/workflows/coverity.yml

48 lines
1.7 KiB
YAML
Raw Normal View History

CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
#
# scan results: https://scan.coverity.com/projects/haproxy
#
name: Coverity
on:
schedule:
- cron: "0 0 * * *"
CI: Add `permissions` to GitHub Actions This change locks down the permissions of the access token in GitHub Actions to only allow reading the repository contents and nothing else. see https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
2021-10-16 16:10:26 +00:00
permissions:
contents: read
CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
jobs:
scan:
runs-on: ubuntu-latest
if: ${{ github.repository_owner == 'haproxy' }}
env:
COVERITY_SCAN_PROJECT_NAME: 'Haproxy'
COVERITY_SCAN_BRANCH_PATTERN: '*'
COVERITY_SCAN_NOTIFICATION_EMAIL: 'chipitsine@gmail.com'
CI: enable QUIC for Coverity scan
2022-02-02 05:24:58 +00:00
COVERITY_SCAN_BUILD_COMMAND: "make CC=clang TARGET=linux-glibc USE_ZLIB=1 USE_PCRE=1 USE_PCRE_JIT=1 USE_LUA=1 USE_OPENSSL=1 USE_QUIC=1 USE_SYSTEMD=1 USE_WURFL=1 WURFL_INC=addons/wurfl/dummy WURFL_LIB=addons/wurfl/dummy USE_DEVICEATLAS=1 DEVICEATLAS_SRC=addons/deviceatlas/dummy USE_51DEGREES=1 51DEGREES_SRC=addons/51degrees/dummy/pattern ADDLIB=\"-Wl,-rpath,$HOME/opt/lib/\" SSL_LIB=${HOME}/opt/lib SSL_INC=${HOME}/opt/include"
CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
steps:
- uses: actions/checkout@v2
- name: Install apt dependencies
run: |
sudo apt-get update
sudo apt-get install -y \
liblua5.3-dev \
libsystemd-dev
CI: enable QUIC for Coverity scan
2022-02-02 05:24:58 +00:00
- name: Install QUICTLS
run: |
QUICTLS=yes scripts/build-ssl.sh
CI: Fix the coverity builds In an attempt to fix the use of DEBUG_STRICT commit 7f0f4786d1927f1450392e871480e3122796024e unfortunately broke the Coverity builds completely. It turns out that Coverity does not properly handle quoting within `COVERITY_SCAN_BUILD_COMMAND`, instead breaking up single arguments at whitespace, thus passing `-DDEBUG_USE_ABORT=1` to `make` as-is. Fix this issue by hijacking the Makefile within the Coverity workflow. We simply replace the default value of the `DEBUG` option with whatever values we need. The build command now only includes the TARGET and USE_* flags, each of which works without any spaces.
2021-01-28 17:58:53 +00:00
- name: Hijack Makefile
run: |
# We cannot pass the DEBUG variable in `COVERITY_SCAN_BUILD_COMMAND`,
# because Coverity splits parameters at whitespaces, without taking
# quoting into account.
sed -i 's/^DEBUG =$/DEBUG = -DDEBUG_STRICT=1 -DDEBUG_USE_ABORT=1/' Makefile
- name: Build WURFL
CONTRIB: move src/wurfl.c and contrib/wurfl to addons/wurfl Both the source file and the dummy library are now at the same place. Maybe the build howto could be moved there as well to make things even cleaner. The Makefile, MAINTAINERS, doc, and vtest matrix were updated.
2021-04-02 14:39:44 +00:00
run: make -C addons/wurfl/dummy
CI: GitHub Actions: enable daily Coverity scan That scan was previously implemented on Travis. Let us migrate it to GitHub Actions. Co-authored-by: Tim Duesterhus <tim@bastelstu.be>
2020-12-25 18:36:52 +00:00
- name: Run Coverity Scan
env:
COVERITY_SCAN_TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}
run: |
curl -fsSL "https://scan.coverity.com/scripts/travisci_build_coverity_scan.sh" | bash || true