jjb/ci-management/ci-management-coverity.yaml

   1 ---
   2 # Coverity Scan static analysis
   3
   4 - job-template:
   5     name: "{project-name}-coverity"
   6     id: onap-gerrit-maven-coverity
   7     description: >
   8       <hr/>
   9       <h2>How to access Coverity Scan static analysis results</h2>
  10       <ol>
  11         <li>Visit <a href="https://scan.coverity.com/projects/{coverity-project-name}">Coverity Scan
  12           project page</a>.</li>
  13         <li>If you have not been added to the project on Coverity Scan service yet:
  14           <ol>
  15             <li>Click on <a href="https://scan.coverity.com/memberships/new?project_id={coverity-project-name}">
  16               Add me to project</a>.</li>
  17             <li>Wait till the project administrators grant you appropriate permissions.</li>
  18           </ol>
  19         <li>Click on <a href="https://scan.coverity.com/projects/{coverity-project-name}/view_defects">
  20           View Defects</a>.</li>
  21       </ol>
  22       <p>Please note that processing data takes some time. You will get an email when it's done.</p>
  23       <p>See more <a href="https://wiki.onap.org/x/Y6vQAw">Coverity Scan HOWTOs</a> on ONAP Developer Wiki.</p>
  24       <hr/>
  25
  26     project-type: freestyle
  27     node: "{build-node}"
  28     branch: master
  29     build-days-to-keep: 7
  30     build-timeout: 240
  31     cron: "@daily"
  32     disabled: false
  33     dry-run: false
  34     git-url: "$GIT_URL/$PROJECT"
  35     java-version: openjdk8
  36     mvn-global-settings: global-settings
  37     mvn-opts: ""
  38     mvn-params: ""
  39     mvn-version: mvn35
  40     coverity-project-name: ""
  41     coverity-token: ""
  42     coverity-user-email: ""
  43     coverity-search-paths: ""
  44     coverity-search-exclude-regexs: ""
  45     max-git-repo-age-hours: 0
  46     stream: master
  47     submodule-recursive: true
  48     submodule-timeout: 10
  49     submodule-disable: false
  50     archive-artifacts: >
  51       cov-int/BUILD.metrics.xml
  52       cov-int/build-log.txt
  53       cov-int/build-timings.txt
  54       cov-int/cov-import-scm-timings.txt
  55       cov-int/coverity-scan-analysed-files.txt
  56       cov-int/scm-untracked-files.txt
  57       cov-int/failed_jsp/*
  58       cov-int/java-security-da-input.dat
  59       cov-int/java-security-da-whitelist.dat
  60       cov-int/jsp-compilation-log.txt
  61       cov-int/jsp-debug-log.txt
  62       cov-int/security.log
  63
  64     properties:
  65       - lf-infra-properties:
  66           build-days-to-keep: "{build-days-to-keep}"
  67
  68     parameters:
  69       - lf-infra-parameters:
  70           project: "{project}"
  71           branch: "{branch}"
  72           stream: "{stream}"
  73       - lf-infra-maven-parameters:
  74           mvn-opts: "{mvn-opts}"
  75           mvn-params: "{mvn-params}"
  76           mvn-version: "{mvn-version}"
  77       - string:
  78           name: ARCHIVE_ARTIFACTS
  79           default: "{archive-artifacts}"
  80           description: Artifacts to archive to the logs server.
  81       - string:
  82           name: SEARCH_PATHS
  83           default: "{coverity-search-paths}"
  84           description: >
  85             Additional directories to search for files to analyse by Coverity
  86             Scan service (space separated).
  87       - string:
  88           name: SEARCH_EXCLUDE_REGEXS
  89           default: "{coverity-search-exclude-regexs}"
  90           description: >
  91             File path patterns to exclude from analysis by Coverity Scan
  92             service (e.g. 3rd-party or auto-generated sources, space
  93             separated).
  94       - string:
  95           name: COVERITY_USER_EMAIL
  96           default: "{coverity-user-email}"
  97           description: >
  98             E-mail address to receive analysis status report after submittion.
  99             It must be a registered user on Coverity Scan service added as a
 100             member to appropriate Coverity Scan project with "Maintainer/Owner"
 101             role.
 102       - bool:
 103           name: DRY_RUN
 104           default: "{dry-run}"
 105           description: Do not submit results to Coverity Scan server at the end of the build.
 106       - string:
 107           name: "MAX_GIT_REPO_AGE_HOURS"
 108           default: "{max-git-repo-age-hours}"
 109           description: >
 110             If set to non-zero run the code scan only if there were no git
 111             repository commits last MAX_GIT_REPO_AGE_HOURS hours.
 112             It makes sense to set the value twice the 'cron' interval for the
 113             job (e.g. if 'cron: @daily', then MAX_GIT_REPO_AGE_HOURS=48)
 114
 115     triggers:
 116       - timed: "{obj:cron}"
 117
 118     wrappers:
 119       - lf-infra-wrappers:
 120           build-timeout: "{build-timeout}"
 121           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 122
 123     builders:
 124       - lf-infra-pre-build
 125       - lf-maven-install:
 126           mvn-version: "{mvn-version}"
 127       - lf-update-java-alternatives:
 128           java-version: "{java-version}"
 129       - lf-provide-maven-settings:
 130           global-settings-file: global-settings
 131           settings-file: "{mvn-settings}"
 132       - inject:
 133           properties-content: |
 134             COVERITY_PROJECT_NAME={coverity-project-name}
 135             COVERITY_TOKEN={coverity-token}
 136       - shell: !include-raw-escape:
 137           - ../../global-jjb/shell/common-variables.sh
 138           - ../../shell/maven-coverity.sh
 139       - lf-provide-maven-settings-cleanup
 140
 141     publishers:
 142       - lf-infra-publish
 143
 144     scm:
 145       - lf-infra-gerrit-scm:
 146           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 147           git-url: "{git-url}"
 148           refspec: $GERRIT_REFSPEC
 149           branch: $GERRIT_BRANCH
 150           submodule-recursive: "{submodule-recursive}"
 151           submodule-timeout: "{submodule-timeout}"
 152           submodule-disable: "{submodule-disable}"
 153           choosing-strategy: default