SRombauts / SQLiteCpp / 28451320988
100%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 14
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 99.711%. Remained the same
28451320988

push

github

web-flow 
Restore Coverity Scan static analysis as a GitHub Actions workflow (#557)

## What this does

The Coverity Scan static analysis used to run from the Travis CI build
matrix (the `COVERITY_SCAN_*` job in `.travis.yml`). Travis is gone, so
the analysis stopped running even though the Coverity project at
https://scan.coverity.com/projects/srombauts-sqlitecpp and its README
badge are still there.

This adds a dedicated GitHub Actions workflow
(`.github/workflows/coverity.yml`) that brings it back. It uses the
official `vapier/coverity-scan-action`, which downloads the Coverity
build tool, compiles the library through `cov-build`, and uploads the
result to the same project.

## How it runs

- On pushes to `master` and on manual `workflow_dispatch`.
- Only in the upstream `SRombauts/SQLiteCpp` repository, guarded by an
`if` on `github.repository`, because the secret token is not readable
from forks.
- The build is configured with tests and examples off, since the
analysis only needs the library to compile.

## One setup step before it works

The workflow reads the project token from a repository secret named
`COVERITY_SCAN_TOKEN`. The old Travis job stored the same token
encrypted in `.travis.yml`, so that ciphertext cannot be reused here.

To enable the workflow, add the token under **Settings -> Secrets and
variables -> Actions -> New repository secret**:

- Name: `COVERITY_SCAN_TOKEN`
- Value: the project token from the Coverity **Project Settings** tab.

The notification email is set to `sebastien.rombauts@gmail.com` in the
workflow, matching the old Travis config. Until the secret is added, the
job fails at the upload step with an authentication error and nothing
else is affected.

## Notes

- `.travis.yml` is left untouched; this PR only adds the GitHub Actions
equivalent.
- Added a CHANGELOG entry under the open 3.4.0 section.

689 of 691 relevant lines covered (99.71%)

31.7 hits per line

Jobs
ID Job ID Ran Files Coverage
1 28451320988.1 14
99.71
 GitHub Action Run
Source Files on build 28451320988