git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Covierty Integration / Improvement

From
MVMarkus Vervier <markus.vervier@x41-dsec.de>
Date
Apr 1, 2022, 20:49 UTC
Message-ID
<10fd679a-eb94-5380-2070-699f1b56a7b1@x41-dsec.de>
Dear git developer team,

X41 is processing the current RfP and some questions came up regarding the improvement / integration of Coverity Scans for git and the estimation of the required work:

- Was there a special purpose for the Coverity integration (e.g. custom 
queries for variant analysis or regression testing?) or did you try to 
integrate it as a best practice / general security hygiene tool?
- Could you tell us more about the amount and types of false positives 
and problems you've faced trying to eliminate them? This will help us to 
understand the expectations / requirements for a successful integration 
of Coverity.
- Could we get access to a sample of the scan results?
Many Thanks
Markus
-- 
Markus Vervier (Managing Director)
X41 D-Sec GmbH, Dennewartstr. 25-27, D-52068 Aachen
T: +49 241 9809418-0, Fax: -9
Unternehmenssitz: Aachen, Amtsgericht Aachen: HRB19989
Geschäftsführer: Markus Vervier
Next: Junio C Hamano
Message 1 of 13 in “Covierty Integration / Improvement”
  1. Markus VervierApr 1, 2022
  2. Junio C HamanoApr 3, 2022
  3. Theodore Ts'oApr 3, 2022
  4. Ævar Arnfjörð BjarmasonApr 4, 2022
  5. Johannes SchindelinApr 5, 2022
  6. Johannes SchindelinApr 5, 2022
  7. Johannes SchindelinApr 6, 2022
  8. Theodore Ts'oApr 6, 2022
  9. Junio C HamanoApr 6, 2022
  10. Johannes SchindelinApr 7, 2022
  11. Markus VervierApr 7, 2022
  12. Johannes SchindelinApr 7, 2022
  13. Derek ZimmerMay 10, 2022

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.