Coverity #326
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Coverity | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| - cron: "5 2 * * *" | |
| permissions: read-all | |
| jobs: | |
| coverity: | |
| name: Coverity | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| runs-on: | |
| - self-hosted | |
| defaults: | |
| run: | |
| shell: bash -noprofile --norc -eo pipefail {0} | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Download coverity | |
| env: | |
| COVERITY_TOKEN: ${{ secrets.COVERITY_TOKEN }} | |
| run: | | |
| cd $HOME | |
| test ! -f coverity/bin/cov-build && { | |
| curl -X POST https://scan.coverity.com/download/linux64 -d "token=$COVERITY_TOKEN&project=intel%2Fgraph-compiler" -o coverity.tgz | |
| tar zxf coverity.tgz | |
| mv -T cov-analysis-linux64-* coverity | |
| } | |
| - name: Add coverity to PATH | |
| run: | | |
| echo "$HOME/coverity/bin" >> $GITHUB_PATH | |
| - name: Show coverity version | |
| run: | | |
| coverity --version | |
| - name: Add coverity inputs to env | |
| run: | | |
| version_id=$(grep 'project(GraphCompiler VERSION' CMakeLists.txt | awk '{print $3}' | tr -d '"') | |
| version_local_id="$(git rev-parse --short HEAD)" | |
| version="${version_id}+git${version_local_id}" | |
| email="[email protected]" | |
| project_id=30281 | |
| echo "project_id=$project_id" | tee -a $GITHUB_ENV | |
| echo "email=$email" | tee -a $GITHUB_ENV | |
| echo "version=$version" | tee -a $GITHUB_ENV | |
| - name: Setup MLIR Python bindings | |
| id: setup-mlir-python-bindings | |
| uses: ./.github/actions/setup-mlir-python-bindings | |
| - name: Run coverity build | |
| run: | | |
| cov-build --dir $HOME/cov-int scripts/compile.sh | |
| tail $HOME/cov-int/build-log.txt | |
| - name: Create coverity results tarball | |
| run: | | |
| cd $HOME | |
| tar zcf cov-int.tgz cov-int | |
| - name: Version for coverity build | |
| run: | | |
| - name: Create coverity build | |
| env: | |
| COVERITY_TOKEN: ${{ secrets.COVERITY_TOKEN }} | |
| run: | | |
| cd $HOME | |
| curl -X POST \ | |
| -d version="$version" \ | |
| -d email="$email" \ | |
| -d token=$COVERITY_TOKEN \ | |
| -d file_name="cov-int.tgz" \ | |
| https://scan.coverity.com/projects/$project_id/builds/init \ | |
| | tee response | |
| upload_url="$(jq -r '.url' response)" | |
| build_id="$(jq -r '.build_id' response)" | |
| echo "upload_url=$upload_url" >> $GITHUB_ENV | |
| echo "build_id=$build_id" | tee -a $GITHUB_ENV | |
| - name: Upload coverity build | |
| env: | |
| COVERITY_TOKEN: ${{ secrets.COVERITY_TOKEN }} | |
| run: | | |
| cd $HOME | |
| curl -X PUT \ | |
| --header 'Content-Type: application/json' \ | |
| --upload-file cov-int.tgz \ | |
| $upload_url | |
| curl -X PUT \ | |
| -d token=$COVERITY_TOKEN \ | |
| https://scan.coverity.com/projects/$project_id/builds/$build_id/enqueue |