Skip to content

Conversation

@laoshanxi
Copy link
Contributor

@laoshanxi laoshanxi commented Nov 4, 2025

1. Introduction

This can help setup code scan with Coverity (the best tool for C++ memory issue detect, popular and even used for Linux kernel) when code pushed to main branch.

image

2. Code Scan Dashboard (use your github account to register Coverity):

https://scan4.scan.coverity.com/#/project-view/69186/18223

3. What you need to do for your repository:

Setup 2 Action secrets:
image

  1. COVERITY_SCAN_TOKEN: use this one (decode base64 of this string "SnlhZExmRHNOUXR0alJaWno4UGx0QQ==")
  2. COVERITY_SCAN_EMAIL: email address you want to get scan result notify.

4. When you click one finding, you will see detail reason (be mind there have false-alarm)

image

5. Note:

  • You can also ping me if you want to setup Coverity project by your own, I will let you known in 10 minutes
  • The Coverity build only select one device, you can change to other one
  • More reference refer to Readme
  • Scan settings for this repo:
image

@laoshanxi laoshanxi changed the title Coverity Code Scan Setup Coverity C++ Code Scan Nov 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant