ci/coverity: add coverity-test job

Add coverity-test job which runs coverity analysis on SCP-firmware. Included in deployment and daily pipelines. Signed-off-by: Mohamed Omar Asaker <[email protected]> Change-Id: I3b1188c04e55cd8fecb6feed3f9d864138b6e70a
ARM-software · Apr 9, 2024 · e93fccf · e93fccf
1 parent 77f20a5
commit e93fccf
Show file tree

Hide file tree

Showing 3 changed files with 39 additions and 0 deletions.
diff --git a/.gitlab/pipelines/daily-pipeline.yml b/.gitlab/pipelines/daily-pipeline.yml
@@ -18,6 +18,7 @@ include:
   - local: .gitlab/templates/unit-test.yml
   - local: .gitlab/templates/build-test.yml
   - local: .gitlab/templates/scmi-test.yml
+  - local: .gitlab/templates/coverity-test.yml
 
 check-lint:
   extends: .check-lint
@@ -29,6 +30,11 @@ banned-api:
   stage: static-analysis
   allow_failure: true
 
+coverity-test:
+  stage: static-analysis
+  extends: .coverity-test
+  allow_failure: true
+
 check-fwk:
   extends: .check-fwk
   stage: unit-testing

diff --git a/.gitlab/pipelines/deployment-pipeline.yml b/.gitlab/pipelines/deployment-pipeline.yml
@@ -18,6 +18,7 @@ include:
   - local: .gitlab/templates/unit-test.yml
   - local: .gitlab/templates/build-test.yml
   - local: .gitlab/templates/scmi-test.yml
+  - local: .gitlab/templates/coverity-test.yml
 
 check-lint:
   extends: .check-lint
@@ -35,6 +36,10 @@ banned-api:
   extends: .banned-api
   stage: static-analysis
 
+coverity-test:
+  stage: static-analysis
+  extends: .coverity-test
+
 check-fwk:
   extends: .check-fwk
   stage: unit-testing

diff --git a/.gitlab/templates/coverity-test.yml b/.gitlab/templates/coverity-test.yml
@@ -0,0 +1,28 @@
+#
+# Arm SCP/MCP Software
+# Copyright (c) 2024, Arm Limited and Contributors. All rights reserved.
+#
+# SPDX-License-Identifier: BSD-3-Clause
+#
+
+.coverity-test:
+  image: ${CI_REGISTRY_IMAGE}/coverity-tester-amd64
+  tags:
+    - amd64
+  variables:
+    GIT_SUBMODULE_STRATEGY: recursive
+    GIT_DEPTH: 1
+    SCP_CI_OUTPUT: /scp/output
+    SCP_CI_PLATFORM: juno
+    WORKSPACE_PATH: /scp/coverity_workspace
+  before_script:
+    - ln -s $(pwd) /scp
+  script:
+    - echo "Coverity analysis will run against $SCP_CI_PLATFORM build"
+    - /coverity_entrypoint.sh
+  artifacts:
+    when: always
+    expire_in: 2 days
+    paths:
+      - output/scp-coverity-analysis-log.txt
+      - output/scp-coverity-analysis-results.tgz