[libseccomp-discuss] [PATCH] build: add support for Coverity scanning

[Paul Moore]

Thanks to the folks at Coverity for supporting Open Source projects
such as this one.

Signed-off-by: Paul Moore <***@redhat.com>
---
.gitignore | 2 ++
Makefile.am | 17 +++++++++++++++++
configure.ac | 6 ++++++
3 files changed, 25 insertions(+)

diff --git a/.gitignore b/.gitignore
index ad67217..82d45ac 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,5 @@ tags
/libtool
/m4
/stamp-h1
+/cov-int
+/libseccomp-coverity_*.tar.gz
diff --git a/Makefile.am b/Makefile.am
index 4709b78..7fe0787 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -34,3 +34,20 @@ check-build: all

check-syntax:
@./tools/check-syntax
+
+if COVERITY
+coverity-build: clean
+ cov-build --dir cov-int ${MAKE} ${AM_MAKEFLAGS} check-build
+endif
+
+if COVERITY
+coverity-tarball: coverity-build
+ @git rev-parse HEAD &> /dev/null && \
+ rev=$$(git rev-parse HEAD | cut -c1-8) || \
+ rev=$$(date --iso-8601=date); \
+ tar czf libseccomp-coverity_$$rev.tar.gz cov-int; \
+ ls -l libseccomp-coverity_$$rev.tar.gz
+endif
+
+clean-local:
+ ${RM} -rf cov-int libseccomp-coverity_*.tar.gz
diff --git a/configure.ac b/configure.ac
index 8cdf4e5..59044e6 100644
--- a/configure.ac
+++ b/configure.ac
@@ -112,6 +112,12 @@ AC_DEFINE_UNQUOTED([ENABLE_PYTHON],
[Python bindings build flag.])

dnl ####
+dnl coverity checks
+dnl ####
+AC_CHECK_PROG(have_coverity, cov-build, "yes", "no")
+AM_CONDITIONAL(COVERITY, test "$have_coverity" = yes)
+
+dnl ####
dnl version dependent files
dnl ####
AC_CONFIG_FILES([