coverity.sh 1.83 KB
Newer Older
Ben Straub committed
1 2 3
#!/bin/bash
set -e

Ben Straub committed
4
# Only run this on our branches
5 6
echo "Branch: $TRAVIS_BRANCH  |  Pull request: $TRAVIS_PULL_REQUEST  |  Slug: $TRAVIS_REPO_SLUG"
if [ "$TRAVIS_BRANCH" != "master" -o "$TRAVIS_PULL_REQUEST" != "false" -o "$TRAVIS_REPO_SLUG" != "libgit2/libgit2" ];
Ben Straub committed
7
then
8
	echo "Only analyzing the 'master' brach of the main repository."
Ben Straub committed
9 10
	exit 0
fi
11

12 13 14
# Environment check
[ -z "$COVERITY_TOKEN" ] && echo "Need to set a coverity token" && exit 1

15
case $(uname -m) in
Ben Straub committed
16 17 18
	i?86)				BITS=32 ;;
	amd64|x86_64)	BITS=64 ;;
esac
19
SCAN_TOOL=https://scan.coverity.com/download/cxx/linux${BITS}
20
TOOL_BASE=$(pwd)/_coverity-scan
Ben Straub committed
21 22

# Install coverity tools
23
if [ ! -d "$TOOL_BASE" ]; then
Ben Straub committed
24
	echo "Downloading coverity..."
25 26
	mkdir -p "$TOOL_BASE"
	pushd "$TOOL_BASE"
Ben Straub committed
27 28 29
	wget -O coverity_tool.tgz $SCAN_TOOL \
		--post-data "project=libgit2&token=$COVERITY_TOKEN"
	tar xzf coverity_tool.tgz
30 31 32
	popd
	TOOL_DIR=$(find "$TOOL_BASE" -type d -name 'cov-analysis*')
	ln -s "$TOOL_DIR" "$TOOL_BASE"/cov-analysis
Ben Straub committed
33 34
fi

35 36
cp script/user_nodefs.h "$TOOL_BASE"/cov-analysis/config/user_nodefs.h

Ben Straub committed
37 38 39 40 41 42 43 44 45 46 47 48 49
COV_BUILD="$TOOL_BASE/cov-analysis/bin/cov-build"

# Configure and build
rm -rf _build
mkdir _build
cd _build
cmake .. -DTHREADSAFE=ON
COVERITY_UNSUPPORTED=1 \
	$COV_BUILD --dir cov-int \
	cmake --build .

# Upload results
tar czf libgit2.tgz cov-int
50
SHA=$(git rev-parse --short HEAD)
51 52 53 54

HTML="$(curl \
	--silent \
	--write-out "\n%{http_code}" \
55
	--form token="$COVERITY_TOKEN" \
Ben Straub committed
56 57
	--form email=bs@github.com \
	--form file=@libgit2.tgz \
58
	--form version="$SHA" \
Ben Straub committed
59
	--form description="Travis build" \
60 61 62 63 64 65 66 67 68 69 70 71
	https://scan.coverity.com/builds?project=libgit2)"
# Body is everything up to the last line
BODY="$(echo "$HTML" | head -n-1)"
# Status code is the last line
STATUS_CODE="$(echo "$HTML" | tail -n1)"

echo "${BODY}"

if [ "${STATUS_CODE}" != "201" ]; then
	echo "Received error code ${STATUS_CODE} from Coverity"
	exit 1
fi