.gitlab-ci.yml: include an automated coverity build on tags

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 2944531f367864e8d381177781ab675bfcc15984..005e33eb9ff1a870b008be9e7a160943f782277f 100644 (file)
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -308,6 +308,30 @@ static-analyzers.Fedora.x86_64:
       - scan-build-libdane/*
   retry: 1
 
+coverity:
+  stage: stage1-testing
+  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD
+  script:
+  - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
+  - tar xfz /tmp/coverity_tool.tgz
+  - ./bootstrap
+  - CFLAGS="-g -Og" dash ./configure --disable-gcc-warnings --cache-file cache/config.cache --disable-guile --disable-maintainer-mode --disable-doc
+  - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
+  - tar cfz cov-int.tar.gz cov-int
+  - curl https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
+    --form token=$COVERITY_SCAN_TOKEN --form email=n.mavrogiannopoulos@gmail.com
+    --form file=@cov-int.tar.gz --form version="`git describe --tags`"
+    --form description="CI build"
+  tags:
+  - shared
+  only:
+  - tags
+  artifacts:
+    expire_in: 1 week
+    when: on_failure
+    paths:
+      - cov-int/*.txt
+
 MinGW32.DLLs:
   stage: stage1-testing
   image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD