travis: Add coverity builds to Travis

[rajachan]

Signed-off-by: Raghu Raja [email protected]

[rajachan]

This might just do it. Will check coverity and see if the reports show up.

[shefty]

I've tried changes like this and have never gotten them to work. That doesn't mean I wasn't doing anything wrong. Do you know if the patch needs to be merged into master prior to coverity running, or if it would run on this PR?

[rajachan]

Do you know if the patch needs to be merged into master prior to coverity running, or if it would run on this PR?

From what I can tell, we'd have to merge it. I did get to trigger my personal coverity project with my fork and this change, but the secrets mismatched so I couldn't do much with it. If we merge and still don't see the reports, we can ditch the Travis part and submit builds from a build server.

[shefty]

Let's see if this works -- thanks

[rajachan]

Looks like the build triggered, but I screwed up and missed the notification email field thinking that was optional:

�[0Kcoverity_scan:start
$ export PROJECT_NAME=ofiwg/libfabric
�[33;1mCoverity Scan analysis selected for branch master.�[0m
�[33;1mCoverity Scan analysis authorized per quota.�[0m
travis_fold:start:build_coverity
�[0Ktravis_time:start:18975aff
�[0K$ curl -s https://scan.coverity.com/scripts/travisci_build_coverity_scan.sh | COVERITY_SCAN_PROJECT_NAME="$PROJECT_NAME" COVERITY_SCAN_NOTIFICATION_EMAIL="${COVERITY_SCAN_NOTIFICATION_EMAIL:-}" COVERITY_SCAN_BUILD_COMMAND="${COVERITY_SCAN_BUILD_COMMAND:-make -j2}" COVERITY_SCAN_BUILD_COMMAND_PREPEND="${COVERITY_SCAN_BUILD_COMMAND_PREPEND:-./autogen.sh; ./configure}" COVERITY_SCAN_BRANCH_PATTERN=${COVERITY_SCAN_BRANCH_PATTERN:-master} bash
�[33;1mNote: COVERITY_SCAN_PROJECT_NAME and COVERITY_SCAN_TOKEN are available on Project Settings page on scan.coverity.com�[0m
ERROR: COVERITY_SCAN_NOTIFICATION_EMAIL must be set
travis_time:end:18975aff:start=1589912834626653744,finish=1589912835217308571,duration=590654827,event=script
�[0Ktravis_fold:end:build_coverity
�[0Kcoverity_scan:end

Which email should I set for that?

[shefty]

Can we set more than one email? If so, then I'm okay adding personal emails (like mine) there. If not, maybe the ofiwg mail list, until we can setup some alternative? Though I guess even in the latter case, I'm okay using my email while we try to setup a generic one with the OFA.

[rajachan]

Looks like that worked 😅 https://scan.coverity.com/projects/ofiwg-libfabric

[shefty]

Yep -thanks! And for a 2-year hiatus, the number of new defects isn't too bad.