gitlab-ci: Update build instructions for Coverity

See https://scan.coverity.com/download?tab=other

ref: https://documentation.blackduck.com/bundle/coverity-docs/page/cli/topics/command_reference.html
ref: https://documentation.blackduck.com/bundle/coverity-docs/page/cli/topics/options_reference.html

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Shwetha K Acharya <Shwetha.K.Acharya@ibm.com>

diff --git a/.gitlab-ci-main.yml b/.gitlab-ci-main.yml
index a9eb27ea6ec002652804aa6e9d12f323126063e9..11bfe76669b2d4b264c578cc273821ba5883e6bb 100644 (file)
--- a/.gitlab-ci-main.yml
+++ b/.gitlab-ci-main.yml
@@ -572,7 +572,7 @@ coverity:
     - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
     - tar xf /tmp/coverity_tool.tgz
     - ./configure.developer --with-cluster-support
-    - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
+    - cov-analysis-linux64-*/bin/coverity capture --dir cov-int --project-dir ./
     - tar czf cov-int.tar.gz cov-int
     - curl
       --form token=$COVERITY_SCAN_TOKEN

diff --git a/coverity.yaml b/coverity.yaml
new file mode 100644 (file)
index 0000000..571e84e
--- /dev/null
+++ b/coverity.yaml
@@ -0,0 +1,19 @@
+---
+# To see all config options, visit:
+# https://documentation.blackduck.com/bundle/coverity-docs/page/cli/topics/options_reference.html
+version: 1
+
+capture:
+  languages:
+    include:
+      - c-family
+  build:
+    build-command: make -j$(nproc)
+    clean-command: make clean
+
+analyze:
+  model-file: coverity/user_models.xmldb
+  checkers:
+    c-family-security: true
+    concurrency: false
+    rule: true