Description
Issue №1325 opened by illume at 2019-09-22 05:57:15
The coverity static analysis tool has a free account for open source projects.
I've set up the pygame project here, and uploaded the first results: https://scan.coverity.com/projects/pygame
Only for manually uploading results so far, not through CI (which is also possible).
rm -rf build cov-int pygamecoverity.tgz
cov-build --dir cov-int python3 setup.py build
tar czvf pygamecoverity.tgz cov-int
# upload the pygamecoverity.tgz file to coverity.
Here's the html for a README badge, but I don't know if adding it to the README is worthwhile yet.
<a href="https://scan.coverity.com/projects/pygame">
<img alt="Coverity Scan Build Status"
src="https://scan.coverity.com/projects/12288/badge.svg"/>
</a>
Here is the TravisCI integration guide: https://scan.coverity.com/travis_ci
Comments
# # illume commented at 2019-10-03 10:08:50
The travisCI addon of coverity will be kind of difficult to integrate I think. Probably the way ffmpeg does it is better: https://github.com/FFmpeg/FFmpeg-Coverity
It uses a separate repo and a docker setup.
# # illume commented at 2019-10-03 10:42:06
I uploaded another build to coverity manually.
# # illume commented at 2019-10-15 07:02:30
Uploaded a build to coverity.
# # illume commented at 2019-10-15 17:35:46
Looks like all the new defects are _sprite.c ones. Probably because cython has changed output, or moved things around perhaps.
# # illume commented at 2019-10-27 15:35:24
Uploaded a build to coverity. https://scan.coverity.com/projects/pygame