Skip to content

Coverity static analysis (1325) #773

Open
@GalacticEmperor1

Description

@GalacticEmperor1

Issue №1325 opened by illume at 2019-09-22 05:57:15

The coverity static analysis tool has a free account for open source projects.

I've set up the pygame project here, and uploaded the first results: https://scan.coverity.com/projects/pygame

Only for manually uploading results so far, not through CI (which is also possible).

rm -rf build cov-int pygamecoverity.tgz
cov-build --dir cov-int python3 setup.py build
tar czvf pygamecoverity.tgz cov-int
#  upload the pygamecoverity.tgz file to coverity.

Here's the html for a README badge, but I don't know if adding it to the README is worthwhile yet.

<a href="https://scan.coverity.com/projects/pygame">
  <img alt="Coverity Scan Build Status"
       src="https://scan.coverity.com/projects/12288/badge.svg"/>
</a>

Here is the TravisCI integration guide: https://scan.coverity.com/travis_ci


Comments

# # illume commented at 2019-10-03 10:08:50

The travisCI addon of coverity will be kind of difficult to integrate I think. Probably the way ffmpeg does it is better: https://github.com/FFmpeg/FFmpeg-Coverity

It uses a separate repo and a docker setup.


# # illume commented at 2019-10-03 10:42:06

I uploaded another build to coverity manually.


# # illume commented at 2019-10-15 07:02:30

Uploaded a build to coverity.


# # illume commented at 2019-10-15 17:35:46

Looks like all the new defects are _sprite.c ones. Probably because cython has changed output, or moved things around perhaps.


# # illume commented at 2019-10-27 15:35:24

Uploaded a build to coverity. https://scan.coverity.com/projects/pygame

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions