mirror of
https://github.com/netdata/netdata.git
synced 2025-04-14 09:38:34 +00:00
69050e6028
* netdata/build: a small house keeping around coverity scan (no functional or process change)
1) Split coverity install on seperate scriptlet, call it through travis when needed
2) Remove shellcheck exclussions, they dont seem to be raised any more (i might be using wrong version of shellcheck, will see)
3) Fix authors,copyrights etc
4) Make sure all echo goes to stderr
5) When installing, use mktemp for the temporary directory and put everything there. Remove afterwards
* netdata/build: missed - remove temp folder once done
* Rebumping with empty commit to trigger build
* Temp commit to force execution of modified code for coverity
* [ci skip] Revert "Temp commit to force execution of modified code for coverity"
This reverts commit 70e770cbbc.
* Temp commit to force execution of modified code for coverity
* Temp commit to force execution of modified code for coverity
* packaging/netdata/coverity-scan: Missed PATH export during scan phase
* netdata/packaging/coverity-scan: the source folder not so temporary after all
Use a more permanent path for the workdir and we will deep dive on the details of this if necessary at a later stage
* netdata/packaging: This is a more general change, push REPOSITORY variable up to travis layer to help testing against personal accounts
* netdata/packaging/coverity-scan: Missed folder creation (no longer using mktemp, duh), also make sure you do a couple of validations so that you know install is failed or not, otherwise we exit with success but nothing has happened
* netdata/coverity-scan: a few more changes towards abstraction
1) move for submit email to travis environment variables
2) Use REPOSITORY in project name
3) Add some new lines on the last log message, to separate it from the curl result
* netdata/coverity: missed parameter from echo
* Reinstate the flag that controls coverity scan execution (was removed for testing purposes, to run coverity in a controlled environment)
* netdata/coverity-scan: Control coverity scan results submission and report back the potential error without blocking the pipeline by failing the step completely
62 lines
2.3 KiB
Bash
Executable file
62 lines
2.3 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# Coverity scan script
|
|
#
|
|
# To run this script you need to provide API token. This can be done either by:
|
|
# - Putting token in ".coverity-token" file
|
|
# - Assigning token value to COVERITY_SCAN_TOKEN environment variable
|
|
#
|
|
# Copyright: SPDX-License-Identifier: GPL-3.0-or-later
|
|
#
|
|
# Author : Costa Tsaousis (costa@netdata.cloud)
|
|
# Author : Pawel Krupa (paulfantom)
|
|
# Author : Pavlos Emm. Katsoulakis (paul@netdata.cloud)
|
|
|
|
cpus=$(grep -c ^processor </proc/cpuinfo)
|
|
[ -z "${cpus}" ] && cpus=1
|
|
|
|
token="${COVERITY_SCAN_TOKEN}"
|
|
([ -z "${token}" ] && [ -f .coverity-token ]) && token="$(<.coverity-token)"
|
|
if [ -z "${token}" ]; then
|
|
echo >&2 "Save the coverity token to .coverity-token or export it as COVERITY_SCAN_TOKEN."
|
|
exit 1
|
|
fi
|
|
|
|
export PATH=${PATH}:/opt/coverity/bin/
|
|
covbuild="$(which cov-build 2>/dev/null || command -v cov-build 2>/dev/null)"
|
|
([ -z "${covbuild}" ] && [ -f .coverity-build ]) && covbuild="$(<.coverity-build)"
|
|
if [ -z "${covbuild}" ]; then
|
|
echo >&2 "Cannot find 'cov-build' binary in \$PATH."
|
|
exit 1
|
|
elif [ ! -x "${covbuild}" ]; then
|
|
echo >&2 "The command ${covbuild} is not executable. Save command the full filename of cov-build in .coverity-build"
|
|
exit 1
|
|
fi
|
|
|
|
version="$(grep "^#define PACKAGE_VERSION" config.h | cut -d '"' -f 2)"
|
|
echo >&2 "Working on netdata version: ${version}"
|
|
|
|
echo >&2 "Cleaning up old builds..."
|
|
make clean || echo >&2 "Nothing to clean"
|
|
|
|
[ -d "cov-int" ] && rm -rf "cov-int"
|
|
|
|
[ -f netdata-coverity-analysis.tgz ] && rm netdata-coverity-analysis.tgz
|
|
|
|
autoreconf -ivf
|
|
./configure --enable-plugin-nfacct --enable-plugin-freeipmi
|
|
"${covbuild}" --dir cov-int make -j${cpus} || exit 1
|
|
|
|
echo >&2 "Compressing data..."
|
|
tar czvf netdata-coverity-analysis.tgz cov-int || exit 1
|
|
|
|
echo >&2 "Sending analysis for version ${version} ..."
|
|
COVERITY_SUBMIT_RESULT=$(curl --progress-bar --form token="${token}" \
|
|
--form email=${COVERITY_SCAN_SUBMIT_MAIL} \
|
|
--form file=@netdata-coverity-analysis.tgz \
|
|
--form version="${version}" \
|
|
--form description="netdata, real-time performance monitoring, done right." \
|
|
https://scan.coverity.com/builds?project=${REPOSITORY})
|
|
|
|
echo ${COVERITY_SUBMIT_RESULT} | grep -q -e 'Build successfully submitted' || echo >&2 "scan results were not pushed to coverity. Message was: ${COVERITY_SUBMIT_RESULT}"
|
|
|
|
echo >&2 "Coverity scan mechanism completed"
|