coverity.yml

#
# Copyright (C) 2023 Intel Corporation
#
# Part of the Unified-Runtime Project, under the Apache License v2.0 with LLVM Exceptions.
# See LICENSE.TXT
# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
#
name: coverity-unified-runtime
# It runs static analysis build - Coverity. It requires special token (set in CI's secret).

on:
  workflow_dispatch:
  schedule:
    # Run every day at 22:00 UTC
    - cron: '0 22 * * *'

env:
  WORKDIR:                           ${{ github.workspace }}
  COVERITY_SCAN_NOTIFICATION_EMAIL:  ${{ secrets.COVERITY_SCAN_NOTIFICATION_EMAIL }}
  COVERITY_SCAN_TOKEN:               ${{ secrets.COVERITY_SCAN_TOKEN }}
  COVERITY_SCAN_PROJECT_NAME:        ${{ github.repository }}
  COVERITY_SCAN_BUILD_COMMAND:       "cmake --build ${{github.workspace}}/build"
  COVERITY_SCAN_BRANCH_PATTERN:      "main"
  TRAVIS_BRANCH:                     ${{ github.ref_name }}


jobs:
  linux:
    name: Coverity
    runs-on: coverity

    steps:
      - name: Clone the git repo
        uses: actions/checkout@v3

      - name: Install pip packages
        run: pip install -r third_party/requirements.txt

      - name: Configure CMake
        run: >
          cmake
          -B $WORKDIR/build
          -DUR_ENABLE_TRACING=ON
          -DUR_DEVELOPER_MODE=ON
          -DUR_BUILD_TESTS=ON
          -DUMF_ENABLE_POOL_TRACKING=ON
          -DUR_FORMAT_CPP_STYLE=ON
          -DCMAKE_BUILD_TYPE=Debug
          -DUR_BUILD_ADAPTER_L0=ON
          -DUR_BUILD_ADAPTER_CUDA=ON
          -DCUDA_CUDA_LIBRARY=/usr/local/cuda/lib64/stubs/libcuda.so
          -DUR_BUILD_ADAPTER_NATIVE_CPU=ON
          -DUR_BUILD_ADAPTER_HIP=ON

      - name: Run Coverity
        run: |
          cd $WORKDIR/build
          wget https://scan.coverity.com/scripts/travisci_build_coverity_scan.sh
          patch < "../.github/scripts/0001-travis-fix-travisci_build_coverity_scan.sh.patch"
          bash ./travisci_build_coverity_scan.sh