threads / patch / 45657

patchtravis-ci: add static analysis build job to run coccicheck

Subject: [PATCH v1] travis-ci: add static analysis build job to run coccicheck

## tl;dr

3 messages between Apr 11, 2017 and Apr 18, 2017. Diffs are folded; open one to read it.

replies: 2people: 3as markdown or json

Lars Schneider· Apr 11, 2017, 07:26 UTC · lore

Add a dedicated build job for static analysis. As a starter we only run coccicheck but in the future we could run Clang Static Analyzer or similar tools, too.

Signed-off-by: Lars Schneider <larsxschneider@gmail.com>
---

Notes:
    Base Ref: master
    Web-Diff: https://github.com/larsxschneider/git/commit/f191458df1
    Checkout: git fetch https://github.com/larsxschneider/git travisci/cocci-v1 && git checkout f191458df1

 .travis.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

Show changes to .travis.yml +12 −0

diff --git a/.travis.yml b/.travis.yml
index 591cc57b80..52855c806c 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -60,6 +60,18 @@ matrix:
         # Use the following command to debug the docker build locally:
         # $ docker run -itv "${PWD}:/usr/src/git" --entrypoint /bin/bash daald/ubuntu32:xenial
         # root@container:/# /usr/src/git/ci/run-linux32-build.sh
+    - env: Static Analysis
+      os: linux
+      compiler:
+      addons:
+        apt:
+          packages:
+          - coccinelle
+      before_install:
+      script:
+        # "before_script" that builds Git is inherited from base job
+        - make coccicheck
+      after_failure:
     - env: Documentation
       os: linux
       compiler: clang

base-commit: b14f27f91770e0f99f64135348977a0ce1c7993a

-- 
2.12.2

Sebastian Schuberth· Apr 16, 2017, 13:31 UTC · re: Lars Schneider · lore

Re: [PATCH v1] travis-ci: add static analysis build job to run coccicheck

On 2017-04-11 09:26, Lars Schneider wrote:

> Add a dedicated build job for static analysis. As a starter we only run
> coccicheck but in the future we could run Clang Static Analyzer or
> similar tools, too.

Just FYI, some time ago someone (I don't recall who) signed up Git with Coverity's free scan service for OSS projects:

https://scan.coverity.com/projects/git?tab=overview

Maybe it makes sense to at least link to this page, too?

-- 
Sebastian Schuberth

Stefan Beller· Apr 18, 2017, 19:20 UTC · re: Sebastian Schuberth · lore

Re: [PATCH v1] travis-ci: add static analysis build job to run coccicheck

On Sun, Apr 16, 2017 at 6:31 AM, Sebastian Schuberth <sschuberth@gmail.com> wrote:

Show 14 quoted lines

> On 2017-04-11 09:26, Lars Schneider wrote:
>
>> Add a dedicated build job for static analysis. As a starter we only run
>> coccicheck but in the future we could run Clang Static Analyzer or
>> similar tools, too.
>
>
> Just FYI, some time ago someone (I don't recall who) signed up Git with
> Coverity's free scan service for OSS projects:
>
> https://scan.coverity.com/projects/git?tab=overview
>
> Maybe it makes sense to at least link to this page, too?
>

yeah 'someone' is a good description. I accidentally took it over when it looked stale. Now I have a cron job to upload the pu branch there each night. (Which is one of the downsides of that service: Git is so large measured by lines of code, such that we're allowed only one scan per day. I wonder if that could be circumvented by each contributor having its own fork, but let's not go that way)