Coverity: update .travis.yml for analysis by pushing in 'coverity_scan' branch

diff --git a/.travis.yml b/.travis.yml
index 7c1c84c99663b3846f4c445a18b565ed9460232a..3d13a6d1ba6f19c238f30ffee845a668a5955e38 100644 (file)
--- a/.travis.yml
+++ b/.travis.yml
@@ -7,16 +7,44 @@ compiler:
 env:
   global:
     - BUILD_LIBPCAP=true
+    # encrypted COVERITY_SCAN_TOKEN from
+    # https://scan.coverity.com/projects/<project_id>/submit_build?tab=travis_ci
+    - secure: "V3k6MtUxrZmzpzJrNdRGcv2PV3WpvIyxYhK3MR8mDmHANXGkRM3qvuTLyiWHfyYxX2KMkEnfYG8b8PPzNNyEXbFdRN9mhHWRyIYduimqdfZLpIz+/c8E/JnMdPo/N5ghPuD/d7pFEsbsWotpZUDyfMsif8QrqqbXDDWFqTgtQg0="
+    # Coverity run condition (avoid matrix multiple runs), need customized
+    # build script. Need an update if new matrix cases.
+    - coverity_scan_run_condition='"$CC" = gcc -a "$BUILD_IPV6" = true'
+    # Coverity script test mode (if true no uploading, avoid reaching the quota)
+    # usual processing: false.
+    - coverity_scan_script_test_mode=false
   matrix:
     - BUILD_IPV6=true
     - BUILD_IPV6=false
 
+addons:
+  coverity_scan:
+    # customized build script URL
+    # TRAVIS_REPO_SLUG: owner_name/repo_name of repository currently being built
+    # TRAVIS_BRANCH: name of the branch currently being built
+    build_script_url: https://raw.githubusercontent.com/$TRAVIS_REPO_SLUG/$TRAVIS_BRANCH/.travis-coverity-scan-build.sh
+    # project metadata
+    project:
+      name: $TRAVIS_REPO_SLUG
+    # Where email notification of build analysis results will be sent
+    notification_email: [email protected]
+    # Commands to prepare for build_command
+    build_command_prepend: ./configure
+    # This command will be added as an argument to "cov-build" to compile
+    # the project for analysis
+    build_command: make
+    # Pattern to match selecting branches that will run analysis
+    branch_pattern: coverity_scan
+
 before_script:
   - sudo apt-get install libssl-dev libssl0.9.8 libssl1.0.0 libdnet-dev libsmi2-dev
-  - if [ "$BUILD_LIBPCAP" = "true" ]; then ( cd ../ && git clone git://github.com/the-tcpdump-group/libpcap.git && cd libpcap && ./configure && make ); else sudo apt-get install libpcap-dev; fi
+  - if [ "$BUILD_LIBPCAP" = true ]; then ( cd ../ && git clone git://github.com/the-tcpdump-group/libpcap.git && cd libpcap && ./configure && make ); else sudo apt-get install libpcap-dev; fi
 
 script:
-  - touch .devel configure
-  - if [ "$BUILD_IPV6" = "true" ]; then ./configure; else ./configure --disable-ipv6; fi
-  - make -s
-  - if [ "$BUILD_IPV6" = "true" ]; then make check; else true; fi
+  - if [ "$COVERITY_SCAN_BRANCH" != 1 ]; then touch .devel configure; fi
+  - if [ "$COVERITY_SCAN_BRANCH" != 1 ]; then if [ "$BUILD_IPV6" = true ]; then ./configure; else ./configure --disable-ipv6; fi; fi
+  - if [ "$COVERITY_SCAN_BRANCH" != 1 ]; then make -s; fi
+  - if [ "$COVERITY_SCAN_BRANCH" != 1 ]; then if [ "$BUILD_IPV6" = true ]; then make check; fi; fi