[PATCH v1] travis-ci: add static analysis build job to run coccicheck

[PATCH v1] travis-ci: add static analysis build job to run coccicheck

[Lars Schneider]

Add a dedicated build job for static analysis. As a starter we only run
coccicheck but in the future we could run Clang Static Analyzer or
similar tools, too.

Signed-off-by: Lars Schneider <larsxschneider@gmail.com>
---

Notes:
    Base Ref: master
    Web-Diff: https://github.com/larsxschneider/git/commit/f191458df1
    Checkout: git fetch https://github.com/larsxschneider/git travisci/cocci-v1 && git checkout f191458df1

 .travis.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.travis.yml b/.travis.yml
index 591cc57b80..52855c806c 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -60,6 +60,18 @@ matrix:
         # Use the following command to debug the docker build locally:
         # $ docker run -itv "${PWD}:/usr/src/git" --entrypoint /bin/bash daald/ubuntu32:xenial
         # root@container:/# /usr/src/git/ci/run-linux32-build.sh
+    - env: Static Analysis
+      os: linux
+      compiler:
+      addons:
+        apt:
+          packages:
+          - coccinelle
+      before_install:
+      script:
+        # "before_script" that builds Git is inherited from base job
+        - make coccicheck
+      after_failure:
     - env: Documentation
       os: linux
       compiler: clang

base-commit: b14f27f91770e0f99f64135348977a0ce1c7993a
-- 
2.12.2

Re: [PATCH v1] travis-ci: add static analysis build job to run coccicheck

[Sebastian Schuberth]

On 2017-04-11 09:26, Lars Schneider wrote:

> Add a dedicated build job for static analysis. As a starter we only run
> coccicheck but in the future we could run Clang Static Analyzer or
> similar tools, too.

Just FYI, some time ago someone (I don't recall who) signed up Git with 
Coverity's free scan service for OSS projects:

https://scan.coverity.com/projects/git?tab=overview

Maybe it makes sense to at least link to this page, too?

-- 
Sebastian Schuberth

Re: [PATCH v1] travis-ci: add static analysis build job to run coccicheck

[Stefan Beller]

On Sun, Apr 16, 2017 at 6:31 AM, Sebastian Schuberth
<sschuberth@gmail.com> wrote:
> On 2017-04-11 09:26, Lars Schneider wrote:
>
>> Add a dedicated build job for static analysis. As a starter we only run
>> coccicheck but in the future we could run Clang Static Analyzer or
>> similar tools, too.
>
>
> Just FYI, some time ago someone (I don't recall who) signed up Git with
> Coverity's free scan service for OSS projects:
>
> https://scan.coverity.com/projects/git?tab=overview
>
> Maybe it makes sense to at least link to this page, too?
>

yeah 'someone' is a good description. I accidentally took it over when
it looked stale. Now I have a cron job to upload the pu branch there
each night. (Which is one of the downsides of that service: Git is so
large measured by lines of code, such that we're allowed only one scan
per day. I wonder if that could be circumvented by each contributor having
its own fork, but let's not go that way)