coverity.yml

name: "Coverity"
on:
  schedule:
    - cron:  '0 1 * * 0'

permissions:
  contents: read

jobs:
  analyze:
    name: Analyze
    if: github.repository == 'Nordix/hiredis-cluster'
    runs-on: ubuntu-latest

    steps:
    - name: Checkout repository
      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
      with:
        fetch-depth: 1

    - name: Download Coverity
      run: |
        cd ..
        wget -q https://scan.coverity.com/download/linux64 --post-data "token=${COVERITY_TOKEN}&project=hiredis-cluster" -O coverity_tool.tgz
        mkdir coverity
        tar xzf coverity_tool.tgz --strip 1 -C coverity
        echo "$(pwd)/coverity/bin" >> $GITHUB_PATH
      env:
        COVERITY_TOKEN: ${{ secrets.COVERITY_TOKEN }}

    - name: Prepare
      uses: awalsh128/cache-apt-pkgs-action@a6c3917cc929dd0345bfb2d3feaf9101823370ad # v1.4.2
      with:
        packages: libevent-dev cmake
        version: 1.0

    - name: Build with Coverity
      run: |
        mkdir build; cd build
        cmake -DCMAKE_BUILD_TYPE=RelWithDebInfo -DENABLE_SSL=ON ..
        cov-build --dir cov-int make

    - name: Submit the result to Coverity
      run: |
        tar czvf hiredis_cluster.tgz cov-int
        curl \
          --form token=${COVERITY_TOKEN} \
          --form email=bjorn.a.svensson@est.tech \
          --form file=@hiredis_cluster.tgz \
          --form version=${GITHUB_SHA} \
          https://scan.coverity.com/builds?project=hiredis-cluster
      working-directory: build
      env:
        COVERITY_TOKEN: ${{ secrets.COVERITY_TOKEN }}