[Git][NTPsec/ntpsec][master] Move Coverity CI job to dockerized image

[Matt Selsky]

Matt Selsky pushed to branch master at NTPsec / ntpsec


Commits:
4db92819 by Matt Selsky at 2020-08-31T22:09:39+00:00
Move Coverity CI job to dockerized image

And enable NTS since we're on a modern OS with modern OpenSSL

- - - - -


3 changed files:

- + .dockerfiles/coverity
- .gitlab-ci-docker-images.yml
- .gitlab-ci.yml


Changes:

=====================================
.dockerfiles/coverity
=====================================
@@ -0,0 +1,6 @@
+FROM debian:unstable-slim
+
+RUN apt-get update
+RUN apt-get install -y netbase bison gcc libssl-dev libcap-dev pps-tools python3-dev curl
+RUN curl -o /tmp/cov-analysis-linux64.tgz --form project=${COVERITY_PROJECT_NAME} --form token=${COVERITY_TOKEN}  https://scan.coverity.com/download/linux64
+RUN tar zxf /tmp/cov-analysis-linux64.tgz


=====================================
.gitlab-ci-docker-images.yml
=====================================
@@ -41,6 +41,9 @@ build-centos-latest:
 build-clang:
   <<: *build_definition
 
+build-coverity:
+  <<: *build_definition
+
 build-debian-oldstable:
   <<: *build_definition
 


=====================================
.gitlab-ci.yml
=====================================
@@ -371,13 +371,13 @@ gentoo-hardened-refclocks:
     - python ./waf configure --disable-doc --disable-manpage --refclock=all build
 
 coverity-scan:
+  <<: *job_definition
+  image: $CI_REGISTRY/ntpsec/ntpsec/coverity
   script:
-    - ./waf configure --disable-doc --disable-manpage --refclock=all --disable-nts
-    - /opt/cov-analysis/bin/cov-build --dir cov-int ./waf build
+    - ./waf configure --disable-doc --disable-manpage --refclock=all
+    - cov-analysis-linux64-*/bin/cov-build --dir cov-int ./waf build
     - tar czf ntpsec_coverity.tgz cov-int
-    - curl --form token="$COVERITY_TOKEN" --form email=security at ntpsec.org --form file=@ntpsec_coverity.tgz --form version="$(git rev-parse --short HEAD)" --form description="Automatic submission by gitlab-ci" https://scan.coverity.com/builds?project=ntpsec
-  tags:
-    - ubuntu-1604-lts
+    - curl --form token="${COVERITY_TOKEN}" --form email=security at ntpsec.org --form file=@ntpsec_coverity.tgz --form version="$(git rev-parse --short HEAD)" --form description="Automatic submission by gitlab-ci" https://scan.coverity.com/builds?project=${COVERITY_PROJECT_NAME}
   rules:
     - if: '$CI_PIPELINE_SOURCE == "schedule" && $CI_COMMIT_BRANCH && $CI_PROJECT_PATH == "NTPsec/ntpsec"'
 



View it on GitLab: https://gitlab.com/NTPsec/ntpsec/-/commit/4db92819352934b7ac6036848b9db859dc90dc81

-- 
View it on GitLab: https://gitlab.com/NTPsec/ntpsec/-/commit/4db92819352934b7ac6036848b9db859dc90dc81
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ntpsec.org/pipermail/vc/attachments/20200831/edc5934f/attachment-0001.htm>