# [PATCH v1] travis-ci: add static analysis build job to run coccicheck

3 messages from 2017-04-11 to 2017-04-18. Participants: Lars Schneider, Sebastian Schuberth, Stefan Beller.
Thread: https://gitlist.dev/t/45657

## Lars Schneider, 2017-04-11 07:26

Subject: [PATCH v1] travis-ci: add static analysis build job to run coccicheck
Message-ID: <20170411072637.57369-1-larsxschneider@gmail.com>
URL: https://gitlist.dev/e/20170411072637.57369-1-larsxschneider%40gmail.com

```
Add a dedicated build job for static analysis. As a starter we only run
coccicheck but in the future we could run Clang Static Analyzer or
similar tools, too.

Signed-off-by: Lars Schneider <larsxschneider@gmail.com>
---

Notes:
    Base Ref: master
    Web-Diff: https://github.com/larsxschneider/git/commit/f191458df1
    Checkout: git fetch https://github.com/larsxschneider/git travisci/cocci-v1 && git checkout f191458df1

 .travis.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.travis.yml b/.travis.yml
index 591cc57b80..52855c806c 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -60,6 +60,18 @@ matrix:
         # Use the following command to debug the docker build locally:
         # $ docker run -itv "${PWD}:/usr/src/git" --entrypoint /bin/bash daald/ubuntu32:xenial
         # root@container:/# /usr/src/git/ci/run-linux32-build.sh
+    - env: Static Analysis
+      os: linux
+      compiler:
+      addons:
+        apt:
+          packages:
+          - coccinelle
+      before_install:
+      script:
+        # "before_script" that builds Git is inherited from base job
+        - make coccicheck
+      after_failure:
     - env: Documentation
       os: linux
       compiler: clang

base-commit: b14f27f91770e0f99f64135348977a0ce1c7993a
-- 
2.12.2


```

## Sebastian Schuberth, 2017-04-16 13:31

Subject: Re: [PATCH v1] travis-ci: add static analysis build job to run coccicheck
Message-ID: <55524921-3295-90e6-6473-ae1289eeeb75@gmail.com>
URL: https://gitlist.dev/e/55524921-3295-90e6-6473-ae1289eeeb75%40gmail.com
In-Reply-To: <20170411072637.57369-1-larsxschneider@gmail.com>

```
On 2017-04-11 09:26, Lars Schneider wrote:

> Add a dedicated build job for static analysis. As a starter we only run
> coccicheck but in the future we could run Clang Static Analyzer or
> similar tools, too.

Just FYI, some time ago someone (I don't recall who) signed up Git with 
Coverity's free scan service for OSS projects:

https://scan.coverity.com/projects/git?tab=overview

Maybe it makes sense to at least link to this page, too?

-- 
Sebastian Schuberth


```

## Stefan Beller, 2017-04-18 19:20

Subject: Re: [PATCH v1] travis-ci: add static analysis build job to run coccicheck
Message-ID: <CAGZ79kbwQYCLXzVMr3wZsx3vA2zBMisqySt7SRQsnU_mQDB4gg@mail.gmail.com>
URL: https://gitlist.dev/e/CAGZ79kbwQYCLXzVMr3wZsx3vA2zBMisqySt7SRQsnU_mQDB4gg%40mail.gmail.com
In-Reply-To: <55524921-3295-90e6-6473-ae1289eeeb75@gmail.com>

```
On Sun, Apr 16, 2017 at 6:31 AM, Sebastian Schuberth
<sschuberth@gmail.com> wrote:
> On 2017-04-11 09:26, Lars Schneider wrote:
>
>> Add a dedicated build job for static analysis. As a starter we only run
>> coccicheck but in the future we could run Clang Static Analyzer or
>> similar tools, too.
>
>
> Just FYI, some time ago someone (I don't recall who) signed up Git with
> Coverity's free scan service for OSS projects:
>
> https://scan.coverity.com/projects/git?tab=overview
>
> Maybe it makes sense to at least link to this page, too?
>

yeah 'someone' is a good description. I accidentally took it over when
it looked stale. Now I have a cron job to upload the pu branch there
each night. (Which is one of the downsides of that service: Git is so
large measured by lines of code, such that we're allowed only one scan
per day. I wonder if that could be circumvented by each contributor having
its own fork, but let's not go that way)

```