1555621 - [Static-Analysis][Coverity] In order to have review-time static-analysis based on Coverity we need to have a task in mach

Status: RESOLVED FIXED

(NSS :: Test, task, P2)

Description

[Andi [:andi]]

Since we want to implement our review-time static-analysis from firefox to nss we need to have a task in the library's mach that implements this sort of analysis.
This feature adds two options:

• Run the analysis locally having a config file for Coverity, this config file can be obtained right after the developer has been granted access to out coverity connect platform where we also store the nss project
• Run the analysis as a try job for the nss project, later on this try job will generate an artifact that the releng-services bot can use it in order to post defects to phabricator.

Comment 1

[Andi [:andi]]

Attachment: Bug 1555621 - add Coverity as static-analysis target in `mach`.

Comment 2

[Andi [:andi]]

The configuration file must look like this:

server_url: ip
auth_key: some_key
package_url: 'ip/cov-package.tar.gz'
package_name: cov-package
package_ver: vXXYYZZ

On the try jobs this is automatically downloaded from the associated secret. If any of the reviewers wants to try this I can grant access to our Coverity Platform server from where he can download the config file

Comment 3

[Andi [:andi]]

Attachment: Bug 1555621 - Add Coverity static-analysis tool as a try job.

Depends on D33138

Comment 4

[J.C. Jones [:jcj] (he/they)]

https://hg.mozilla.org/projects/nss/rev/0c9d61532c3c528b325d15e8044ccebffe7b62ed
https://hg.mozilla.org/projects/nss/rev/14bc2733f31e2cfc31d08036510c0304cb228b12

Comment 5

[J.C. Jones [:jcj] (he/they)]

https://hg.mozilla.org/projects/nss/rev/da87cd7622ee673cb09ae234e4a4d41400c6c324