Skip to content

Make AppVeyor run Coverity scan #1066

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 6, 2015
Merged

Make AppVeyor run Coverity scan #1066

merged 3 commits into from
Jun 6, 2015

Conversation

nulltoken
Copy link
Member

Fix #986

@nulltoken nulltoken force-pushed the ntk/coverity_appveyor branch from 6dccca8 to 7eb54f5 Compare June 2, 2015 16:23
@whoisj
Copy link

whoisj commented Jun 2, 2015

🎉 👍

@nulltoken nulltoken force-pushed the ntk/coverity_appveyor branch from 7eb54f5 to ff8ab1d Compare June 2, 2015 16:28
@nulltoken
Copy link
Member Author

@whoisj It's not there yet... 😉

@whoisj
Copy link

whoisj commented Jun 2, 2015

oh I was commenting on the concept - not actually approving anything 😕

@nulltoken
Copy link
Member Author

@FeodorFitsner I think I'd need some help from you with this PR 🙏

How can publish the file libgit2sharp.zip as an artifact?

038e962 doesn't publish it.
Neither 5459aef

Although it exists in the folder (see the ls output in the build log)

I'm surely missing something obvious here, your insight would be very much appreciated.

@FeodorFitsner
Copy link
Contributor

When is libgit2sharp.zip created? Artifacts are getting packaged after test and before deploy stages. Maybe you should use script to push artifacts: http://www.appveyor.com/docs/packaging-artifacts#pushing-artifacts-from-scripts


& .\packages\PublishCoverity\PublishCoverity.exe compress `
-i "$env:APPVEYOR_BUILD_FOLDER\cov-int" `
-o "$env:APPVEYOR_BUILD_FOLDER\$env:APPVEYOR_PROJECT_NAME.zip" `
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@FeodorFitsner The file is created by this call to PublishCoverity.exe

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK, it's on_success stage what means it's too late for picking up artifacts. Use Push-AppVeyorArtifact cmdlet: http://www.appveyor.com/docs/build-worker-api#push-artifact

@nulltoken
Copy link
Member Author

Artifacts are getting packaged after test and before deploy stages.

@FeodorFitsner Perfect! They're currently created in the on_success stage. I'm going to move this to build_success, then.

As always, you're spot on with an amazing support. ❤️ ‼️

@nulltoken
Copy link
Member Author

@FeodorFitsner s/build_success/deploy_script/

@nulltoken
Copy link
Member Author

@FeodorFitsner I eventually relied on after_test (BTW, maybe the doc should mention that this after_* hooks are invoked if the related stage succeeded.

@nulltoken
Copy link
Member Author

@csMACnz PublishCoverity is awesome!

However, Coverity may reject a build because the maximum number of uploaded builds has been exceeded. How could we nicely wrap the call to PublishCoverity.exe publish so that it doesn't fail the AppVeyor build when that happens?

For instance, this current builds fails because the AppVeyor secured variables aren't valued in a PR. According to you, how should we tweak the script so that the build doesn't fail any more?

/cc @FeodorFitsner

@whoisj
Copy link

whoisj commented Jun 4, 2015

Can we limit Covertity to only run after all other unit tests pass?

@nulltoken
Copy link
Member Author

@whoisj The tests are currently commented out to speed the build. Of course, they'll be reinstated once I'm done and this PR is ready for review.

@nulltoken nulltoken force-pushed the ntk/coverity_appveyor branch 4 times, most recently from af220c2 to 19fe854 Compare June 6, 2015 13:14
@nulltoken
Copy link
Member Author

@whoisj I took an alternate route.

AppVeyor exposes a way to schedule builds.

New proposal is to run Coverity once a week during a scheduled build. As the build will be a re-run of the the latest vNext tip, there's no need to run the tests any longer (this saves us from failed builds because of network hiccups).

Thoughts?

@whoisj
Copy link

whoisj commented Jun 6, 2015

That works so long as somebody is responsive to the Covertity report and creates issues appropriately; and release points are at, or as close as reasonable to, Covertity scan points.

@nulltoken
Copy link
Member Author

That works so long as somebody is responsive to the Coverity report and creates issues appropriately; and release points are at, or as close as reasonable to, Covertity scan points.

Indeed, the idea would be to fix them as quickly as possible.
FWIW, the way it's configured, found defects are not disclosed by default.

@nulltoken
Copy link
Member Author

So, good people, good to merge?

@nulltoken nulltoken force-pushed the ntk/coverity_appveyor branch from 23b2b07 to 61fdbed Compare June 6, 2015 18:16
@whoisj
Copy link

whoisj commented Jun 6, 2015

👍

nulltoken added a commit that referenced this pull request Jun 6, 2015
@nulltoken nulltoken merged commit 77691c2 into vNext Jun 6, 2015
@nulltoken nulltoken deleted the ntk/coverity_appveyor branch June 6, 2015 18:29
@nulltoken nulltoken added this to the v0.22 milestone Jun 6, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants