@@ -2,12 +2,12 @@ name: Coverity Build
22
33on :
44 schedule :
5- - cron : ' 0 18 * * *'
5+ - cron : " 0 18 * * *"
66 workflow_dispatch :
77 inputs :
88 branch :
9- description : ' Branch to run scans on'
10- default : ' main'
9+ description : " Branch to run scans on"
10+ default : " main"
1111 type : string
1212
1313env :
@@ -26,81 +26,81 @@ concurrency:
2626
2727jobs :
2828 coverity :
29- runs-on : ' ubuntu-22.04'
29+ runs-on : " ubuntu-22.04"
3030 timeout-minutes : 90
3131 steps :
32- - name : ' Harden Runner'
33- uses : step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
34- with :
35- egress-policy : audit
36-
37- - name : ' Checkout repository'
38- uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
39- with :
40- ref : ${{ inputs.branch }}
41-
42- - name : ' Install OS level dependencies'
43- run : eval 'source scripts/setup_build_env.sh && install_package_dependencies'
44-
45- - name : ' Check local dependencies build cache'
46- id : load-local-dependencies-cache
47- uses : actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
48- with :
49- path : ${{ env.BUILD_DIR }}
50- key : ${{ runner.os }}-${{ hashFiles('versions.env') }}-${{ hashFiles('scripts/setup*.sh') }}
51-
52- - name : ' Download, unpack and patch build dependencies'
53- if : steps.load-local-dependencies-cache.outputs.cache-hit != 'true'
54- run : eval 'source scripts/setup_build_env.sh && get_download_unpack_dependencies'
55-
56- - name : ' Clone and patch ffmpeg 6.1 and 7.0'
57- if : steps.load-local-dependencies-cache.outputs.cache-hit != 'true'
58- run : |
59- ffmpeg-plugin/clone-and-patch-ffmpeg.sh "6.1"
60- ffmpeg-plugin/clone-and-patch-ffmpeg.sh "7.0"
61-
62- - name : ' Build and Install xdp and libbpf'
63- run : eval 'source scripts/setup_build_env.sh && lib_install_xdp_bpf_tools'
64-
65- - name : ' Build and Install libfabric'
66- run : eval 'source scripts/setup_build_env.sh && lib_install_fabrics'
67-
68- - name : ' Build and Install the DPDK'
69- run : eval 'source scripts/setup_build_env.sh && lib_install_dpdk'
70-
71- - name : ' Build and Install the MTL'
72- run : eval 'source scripts/setup_build_env.sh && lib_install_mtl'
73-
74- - name : ' Build and Install JPEG XS'
75- run : eval 'source scripts/setup_build_env.sh && lib_install_jpeg_xs'
76-
77- - name : ' Build and Install JPEG XS ffmpeg plugin'
78- run : eval 'source scripts/setup_build_env.sh && lib_install_mtl_jpeg_xs_plugin'
79-
80- - name : ' Build gRPC and dependencies'
81- run : eval 'source scripts/setup_build_env.sh && lib_install_grpc'
82-
83- - name : ' Configure ffmpeg and dependencies'
84- run : |
85- sed -i 's/strlen (MEMIF_DEFAULT_APP_NAME)/(sizeof(MEMIF_DEFAULT_APP_NAME) - 1)/g' ${{ github.workspace }}/sdk/3rdparty/libmemif/src/memif_private.h && \
86- ${{ github.workspace }}/build.sh && \
87- ${{ github.workspace }}/ffmpeg-plugin/configure-ffmpeg.sh "6.1" --disable-doc --disable-debug && \
88- ${{ github.workspace }}/ffmpeg-plugin/configure-ffmpeg.sh "7.0" --disable-doc --disable-debug && \
89- rm -rf ${{ github.workspace }}/_build/mcm
90- echo "\"${{ github.workspace }}/ffmpeg-plugin/build-ffmpeg.sh\" \"6.1\"" > ${{ github.workspace }}/build.sh
91- echo "\"${{ github.workspace }}/ffmpeg-plugin/build-ffmpeg.sh\" \"7.0\"" > ${{ github.workspace }}/build.sh
92-
93- - name : ' Run coverity'
94- uses : vapier/coverity-scan-action@2068473c7bdf8c2fb984a6a40ae76ee7facd7a85 # v1.8.0
95- with :
96- project : ' Media-Communications-Mesh'
97- email : ${{ secrets.COVERITY_SCAN_EMAIL }}
98- token : ${{ secrets.COVERITY_SCAN_TOKEN }}
99- build_language : ' cxx'
100- build_platform : ' linux64'
101- command : ${{ github.workspace }}/build.sh
102-
103- - uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
104- with :
105- name : coverity-reports
106- path : ' ${{ github.workspace }}/cov-int'
32+ - name : " Harden Runner"
33+ uses : step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
34+ with :
35+ egress-policy : audit
36+
37+ - name : " Checkout repository"
38+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
39+ with :
40+ ref : ${{ inputs.branch }}
41+
42+ - name : " Install OS level dependencies"
43+ run : eval 'source scripts/setup_build_env.sh && install_package_dependencies'
44+
45+ - name : " Check local dependencies build cache"
46+ id : load-local-dependencies-cache
47+ uses : actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
48+ with :
49+ path : ${{ env.BUILD_DIR }}
50+ key : ${{ runner.os }}-${{ hashFiles('versions.env') }}-${{ hashFiles('scripts/setup*.sh') }}
51+
52+ - name : " Download, unpack and patch build dependencies"
53+ if : steps.load-local-dependencies-cache.outputs.cache-hit != 'true'
54+ run : eval 'source scripts/setup_build_env.sh && get_download_unpack_dependencies'
55+
56+ - name : " Clone and patch ffmpeg 6.1 and 7.0"
57+ if : steps.load-local-dependencies-cache.outputs.cache-hit != 'true'
58+ run : |
59+ ffmpeg-plugin/clone-and-patch-ffmpeg.sh "6.1"
60+ ffmpeg-plugin/clone-and-patch-ffmpeg.sh "7.0"
61+
62+ - name : " Build and Install xdp and libbpf"
63+ run : eval 'source scripts/setup_build_env.sh && lib_install_xdp_bpf_tools'
64+
65+ - name : " Build and Install libfabric"
66+ run : eval 'source scripts/setup_build_env.sh && lib_install_fabrics'
67+
68+ - name : " Build and Install the DPDK"
69+ run : eval 'source scripts/setup_build_env.sh && lib_install_dpdk'
70+
71+ - name : " Build and Install the MTL"
72+ run : eval 'source scripts/setup_build_env.sh && lib_install_mtl'
73+
74+ - name : " Build and Install JPEG XS"
75+ run : eval 'source scripts/setup_build_env.sh && lib_install_jpeg_xs'
76+
77+ - name : " Build and Install JPEG XS ffmpeg plugin"
78+ run : eval 'source scripts/setup_build_env.sh && lib_install_mtl_jpeg_xs_plugin'
79+
80+ - name : " Build gRPC and dependencies"
81+ run : eval 'source scripts/setup_build_env.sh && lib_install_grpc'
82+
83+ - name : " Configure ffmpeg and dependencies"
84+ run : |
85+ sed -i 's/strlen (MEMIF_DEFAULT_APP_NAME)/(sizeof(MEMIF_DEFAULT_APP_NAME) - 1)/g' ${{ github.workspace }}/sdk/3rdparty/libmemif/src/memif_private.h && \
86+ ${{ github.workspace }}/build.sh && \
87+ ${{ github.workspace }}/ffmpeg-plugin/configure-ffmpeg.sh "6.1" --disable-doc --disable-debug && \
88+ ${{ github.workspace }}/ffmpeg-plugin/configure-ffmpeg.sh "7.0" --disable-doc --disable-debug && \
89+ rm -rf ${{ github.workspace }}/_build/mcm
90+ echo "\"${{ github.workspace }}/ffmpeg-plugin/build-ffmpeg.sh\" \"6.1\"" > ${{ github.workspace }}/build.sh
91+ echo "\"${{ github.workspace }}/ffmpeg-plugin/build-ffmpeg.sh\" \"7.0\"" > ${{ github.workspace }}/build.sh
92+
93+ - name : " Run coverity"
94+ uses : vapier/coverity-scan-action@2068473c7bdf8c2fb984a6a40ae76ee7facd7a85 # v1.8.0
95+ with :
96+ project : " Media-Communications-Mesh"
97+ email : ${{ secrets.COVERITY_SCAN_EMAIL }}
98+ token : ${{ secrets.COVERITY_SCAN_TOKEN }}
99+ build_language : " cxx"
100+ build_platform : " linux64"
101+ command : ${{ github.workspace }}/build.sh
102+
103+ - uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
104+ with :
105+ name : coverity-reports
106+ path : " ${{ github.workspace }}/cov-int"
0 commit comments