Merge "KUD deployment should be run as non-root"
[ci-management.git] / jjb / ci-management / ci-management-coverity.yaml
1 ---
2 # Coverity Scan static analysis
3
4 - job-template:
5     name: '{project-name}-coverity'
6     id: onap-gerrit-maven-coverity
7     description: >
8       <hr/>
9       <h2>How to access Coverity Scan static analysis results</h2>
10       <ol>
11         <li>Visit <a href="https://scan.coverity.com/projects/{coverity-project-name}">Coverity Scan
12           project page</a>.</li>
13         <li>If you have not been added to the project on Coverity Scan service yet:
14           <ol>
15             <li>Click on <a href="https://scan.coverity.com/memberships/new?project_id={coverity-project-name}">
16               Add me to project</a>.</li>
17             <li>Wait till the project administrators grant you appropriate permissions.</li>
18           </ol>
19         <li>Click on <a href="https://scan.coverity.com/projects/{coverity-project-name}/view_defects">
20           View Defects</a>.</li>
21       </ol>
22       <p>Please note that processing data takes some time. You will get an email when it's done.</p>
23       <hr/>
24
25     project-type: freestyle
26     node: '{build-node}'
27     branch: master
28     build-days-to-keep: 7
29     build-timeout: 60
30     cron: '@daily'
31     disabled: false
32     git-url: '$GIT_URL/$PROJECT'
33     java-version: openjdk8
34     mvn-global-settings: global-settings
35     mvn-opts: ''
36     mvn-params: ''
37     mvn-version: mvn35
38     coverity-project-name: ''
39     coverity-token: ''
40     coverity-user-email: ''
41     stream: master
42     submodule-recursive: true
43     submodule-timeout: 10
44     submodule-disable: false
45     archive-artifacts: >
46       **/*.log
47       **/hs_err_*.log
48       **/target/**/feature.xml
49       **/target/failsafe-reports/failsafe-summary.xml
50       **/target/surefire-reports/*-output.txt
51       **/cov-int/BUILD.metrics.xml
52       **/cov-int/build-log.txt
53       **/cov-int/build-timings.txt
54       **/cov-int/java-security-da-whitelist.dat
55
56     properties:
57       - lf-infra-properties:
58           build-days-to-keep: '{build-days-to-keep}'
59
60     parameters:
61       - lf-infra-parameters:
62           project: '{project}'
63           branch: '{branch}'
64           stream: '{stream}'
65       - lf-infra-maven-parameters:
66           mvn-opts: '{mvn-opts}'
67           mvn-params: '{mvn-params}'
68           mvn-version: '{mvn-version}'
69       - string:
70           name: ARCHIVE_ARTIFACTS
71           default: '{archive-artifacts}'
72           description: Artifacts to archive to the logs server.
73
74     triggers:
75       - timed: '{obj:cron}'
76
77     wrappers:
78       - lf-infra-wrappers:
79           build-timeout: '{build-timeout}'
80           jenkins-ssh-credential: '{jenkins-ssh-credential}'
81
82     builders:
83       - lf-infra-pre-build
84       - lf-maven-install:
85           mvn-version: '{mvn-version}'
86       - lf-update-java-alternatives:
87           java-version: '{java-version}'
88       - lf-provide-maven-settings:
89           global-settings-file: global-settings
90           settings-file: '{mvn-settings}'
91       - inject:
92           properties-content: |
93             COVERITY_PROJECT_NAME={coverity-project-name}
94             COVERITY_TOKEN={coverity-token}
95             COVERITY_USER_EMAIL={coverity-user-email}
96       - shell: !include-raw-escape:
97           - ../../global-jjb/shell/common-variables.sh
98           - ../../shell/maven-coverity.sh
99       - lf-provide-maven-settings-cleanup
100
101     publishers:
102       - lf-infra-publish
103
104     scm:
105       - lf-infra-gerrit-scm:
106           jenkins-ssh-credential: '{jenkins-ssh-credential}'
107           git-url: '{git-url}'
108           refspec: $GERRIT_REFSPEC
109           branch: $GERRIT_BRANCH
110           submodule-recursive: '{submodule-recursive}'
111           submodule-timeout: '{submodule-timeout}'
112           submodule-disable: '{submodule-disable}'
113           choosing-strategy: default