finalcut/.github/workflows/coverity-scan.yml at main · gansm/finalcut · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
name: "Coverity Scan"

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
  schedule:
    - cron: '0 7 * * 2'

jobs:
  analyze:
    runs-on: ubuntu-latest

    env:
      COVERITY_SCAN_BRANCH_PATTERN:     "${{ github.ref}}"
      COVERITY_SCAN_NOTIFICATION_EMAIL: "[email protected]"
      COVERITY_SCAN_PROJECT_NAME:       "${{ github.repository }}"
      # Set in repo settings -> secrets -> repository secrets
      COVERITY_SCAN_TOKEN:              "${{ secrets.COVERITY_SCAN_TOKEN }}"
      CURRENT_REF:                      "${{ github.ref }}"

    steps:
    - name: Repository checkout
      uses: actions/checkout@v3

    - name: Before_install
      run: |
        lsb_release -a
        uname -a
        whoami
        tty || echo
        pwd

    - name: Download coverity scan build tool
      run: |
        wget --secure-protocol=TLSv1_2 --max-redirect=0 -q https://scan.coverity.com/download/cxx/linux64 \
          --post-data "token=$COVERITY_SCAN_TOKEN&project=gansm%2Ffinalcut" \
          -O cov-analysis-linux64.tar.gz
        mkdir cov-analysis-linux64
        tar xzf cov-analysis-linux64.tar.gz --strip 1 -C cov-analysis-linux64

    - name: Install dependencies via apt-get
      run: |
        sudo apt-get update
        sudo apt-get -y install \
          ca-certificates \
          gcc \
          g++ \
          gpm \
          libgpm-dev \
          libcppunit-dev \
          autoconf-archive

    - name: Build with cov-build
      run: |
        export PATH=`pwd`/cov-analysis-linux64/bin:$PATH
        cat cov-int/scm_log.txt || echo
        autoreconf -v --install --force
        ./configure --prefix=/usr \
          CPPFLAGS="-DDEBUG" \
          CXXFLAGS="-g -O0 -DDEBUG -DUNIT_TEST" \
          --with-unit-test
        CPU_COUNT="$( ( ( getconf _NPROCESSORS_ONLN 2>/dev/null || (getconf NPROCESSORS_ONLN 2>/dev/null) ) || nprocx 2>/dev/null ) || echo "1")"
        JOBS="$(( $((CPU_COUNT / 2)) > 1 ? $((CPU_COUNT / 2)) : 1 ))"
        cov-build --dir cov-int make V=1 -j$JOBS

    - name: Submit the result to Coverity Scan
      run: |
        tar czvf finalcut.tgz cov-int
        curl \
        --form token=$COVERITY_SCAN_TOKEN \
        --form email=$COVERITY_SCAN_NOTIFICATION_EMAIL \
        --form [email protected] \
        --form version="main" \
        --form description="Build submitted via github action" \
        https://scan.coverity.com/builds?project=gansm%2Ffinalcut

    - name: Make unit test
      run: |
        sudo sysctl -w dev.tty.legacy_tiocsti=1  # Required for Linux 6.2.0 or later
        script -q -e -c 'make check' && RET=$? || RET=$?
        cat test/*.log || echo
        echo "Exit status: $RET"
        exit "$RET"