summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMike Frysinger <vapier@gentoo.org>2021-10-05 07:39:45 -0400
committerMike Frysinger <vapier@gentoo.org>2021-10-05 08:24:39 -0400
commitdceb29a6f5e8b0fb5e21d14c39013efcbb9203ee (patch)
treec6cb39af455879a9130c88a306380bcde3922f02
parent4f88530baa5560dc8b2cf15b78c5e2b2869be760 (diff)
downloadlibgd-dceb29a6f5e8b0fb5e21d14c39013efcbb9203ee.tar.gz
CI: enable Coverity Scan integration
-rw-r--r--.github/workflows/coverity.yml55
1 files changed, 55 insertions, 0 deletions
diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
new file mode 100644
index 0000000..2042469
--- /dev/null
+++ b/.github/workflows/coverity.yml
@@ -0,0 +1,55 @@
+# GitHub actions workflow.
+# https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions
+
+# https://scan.coverity.com/projects/libgd
+name: Coverity Scan
+
+# Only want to analyze official releases, not any pull requests.
+# The free service doesn't have enough bandwidth for both.
+on:
+ push:
+ branches: [master, GD-*]
+
+jobs:
+ coverity:
+ strategy:
+ matrix:
+ os: [ubuntu-latest]
+ cc: [gcc]
+ runs-on: ${{ matrix.os }}
+ env:
+ CC: ${{ matrix.cc }}
+ steps:
+ - name: Install dependencies
+ run: sudo apt-get install -y
+ libavifile-0.7-dev
+ libde265-dev
+ libfreetype-dev
+ libheif-dev
+ libimagequant-dev
+ libjpeg-turbo8-dev
+ libpng-dev
+ libraqm-dev
+ libtiff5-dev
+ libwebp-dev
+ libx265-dev
+ libxpm-dev
+ - uses: actions/checkout@v2
+ - name: Configure gd
+ run: cmake
+ -DENABLE_CPP=1
+ -DENABLE_FREETYPE=1
+ -DENABLE_GD_FORMATS=1
+ -DENABLE_HEIF=0
+ -DENABLE_JPEG=1
+ -DENABLE_PNG=1
+ -DENABLE_TIFF=1
+ -DENABLE_WEBP=1
+ -DBUILD_TEST=1
+ -B ${{github.workspace}}/build
+ - uses: vapier/coverity-scan-action@v0
+ with:
+ project: libgd%2Flibgd
+ email: security@libgd.org
+ token: ${{ secrets.COVERITY_SCAN_TOKEN }}
+ command: make -C ${{github.workspace}}/build