action-sca-setup/action.yml at main · zephyrproject-rtos/action-sca-setup · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# Copyright 2025 Intel Corp.
# SPDX-License-Identifier: Apache-2.0

name: Setup SCA for Zephyr
description: Setup SCA tools

inputs:
  tool-name:
    description: |
      The tool to be used.
    required: true
  tool-version:
    description: |
      The tool version to be used.
    required: true
  install-dir:
    description: |
      Installation directory
    required: true
  s3-access-key-id:
    description: |
      Access Key ID
    required: true
  s3-secret-access-key:
    description: |
      Secret Access Key
    required: true
  license-server:
    description: |
      License server for SCA tools.
    required: false
    default: ""
  license-key-ttl:
    description: |
      License key time to live in seconds.
    required: false
    default: 240

runs:
  using: "composite"
  steps:
    - name: Configure AWS Credentials
      uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722 # v4.1.0
      with:
        aws-access-key-id: ${{ inputs.s3-access-key-id }}
        aws-secret-access-key: ${{ inputs.s3-secret-access-key }}
        aws-region: us-east-1

    - name: Set up Python
      uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
      with:
        python-version: 3.12
        cache: pip
        cache-dependency-path: scripts/requirements-actions.txt

    - name: Install Python packages
      shell: bash
      run: |
        pip install awscli

    - name: Download and Unpack tool
      shell: bash
      run: |
        if [ "${{ inputs.tool-name }}" = "coverity" ]; then
          aws s3 cp --quiet  s3://tooldist/coverity/cov-analysis-linux64-2024.6.1.tar.gz .
          mkdir -p ${{ inputs.install-dir }}
          tar xf cov-analysis-linux64-2024.6.1.tar.gz -C ${{ inputs.install-dir }}  --strip-components=1
          rm cov-analysis-linux64-2024.6.1.tar.gz
          echo "${{ inputs.install-dir }}/bin"  >> $GITHUB_PATH
        elif [  "${{ inputs.tool-name }}" = "eclair" ]; then
          aws s3 cp --quiet  s3://tooldist/eclair/eclair-${{ inputs.tool-version }}.tar.bz2 .
          mkdir -p ${{ inputs.install-dir }}
          tar xf eclair-${{ inputs.tool-version }}.tar.bz2 -C ${{ inputs.install-dir }}  --strip-components=1
          rm eclair-${{ inputs.tool-version }}.tar.bz2
          ./${{ inputs.install-dir }}/bin/postinstall.sh
          echo "${{ inputs.install-dir }}/bin"  >> $GITHUB_PATH
          mkdir -p ~/.hasplm
          echo "[REMOTE]" >  ~/.hasplm/hasp_113938.ini
          echo "serveraddr = ${{ inputs.license-server }}" >>  ~/.hasplm/hasp_113938.ini
          echo "[SERVER]" >>  ~/.hasplm/hasp_113938.ini
          echo "requestlog = 1" >>  ~/.hasplm/hasp_113938.ini
          echo "errorlog = 1" >> ~/.hasplm/hasp_113938.ini
          ./${{ inputs.install-dir }}/bin/eclair_licman -d 57350 -s k=630257348907412819 -t ${{ inputs.license-key-ttl }}
        fi