mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-21 16:49:43 +01:00
attempting to get travis to run a coverity scan
This commit is contained in:
19
.travis.yml
19
.travis.yml
@@ -1,24 +1,15 @@
|
|||||||
language: java
|
language: java
|
||||||
jdk: oraclejdk7
|
jdk: oraclejdk7
|
||||||
script: mvn install -DreleaseTesting
|
script: mvn install -DreleaseTesting
|
||||||
|
|
||||||
env:
|
env:
|
||||||
global:
|
global:
|
||||||
- secure: ZUzhWfpXJw/oAeDlUkDFkEJMT0T7kCN3d7ah8urkL2B0KFfKOqQagkbXkgvDa1SYud8VdcnoGa69LfkEr5IrdqW7R4bEYZAiN5swm4Z0iO8t53szVspm2f+O9jQ44O/sfOfpfLxWUUuhdc7Vbrszp+tSszxdPmssWL+f5a/mfWs=
|
- secure: ZUzhWfpXJw/oAeDlUkDFkEJMT0T7kCN3d7ah8urkL2B0KFfKOqQagkbXkgvDa1SYud8VdcnoGa69LfkEr5IrdqW7R4bEYZAiN5swm4Z0iO8t53szVspm2f+O9jQ44O/sfOfpfLxWUUuhdc7Vbrszp+tSszxdPmssWL+f5a/mfWs=
|
||||||
- secure: pmFymoI7qH0Kna3NkcHrqLiTVWKmrhwqA4Z9U6XLhWDQxcs5g94wCCKpGB6Lkz9mkvRxBRFpZZelnXJa9W9mnuVOMIa5tQfS5gBuaNXOe7AXXdc+Y2975OR9sSfvf16FxLFvNJILmZq+bpMLs+EXaQvjYQHW2O6OWZdLhAPVG6A=
|
- secure: pmFymoI7qH0Kna3NkcHrqLiTVWKmrhwqA4Z9U6XLhWDQxcs5g94wCCKpGB6Lkz9mkvRxBRFpZZelnXJa9W9mnuVOMIa5tQfS5gBuaNXOe7AXXdc+Y2975OR9sSfvf16FxLFvNJILmZq+bpMLs+EXaQvjYQHW2O6OWZdLhAPVG6A=
|
||||||
|
|
||||||
before_install:
|
before_install:
|
||||||
- wget -O ~/codacy-coverage-reporter-assembly.jar https://oss.sonatype.org/service/local/repositories/releases/content/com/codacy/codacy-coverage-reporter/1.0.13/codacy-coverage-reporter-1.0.13-assembly.jar
|
- wget -O ~/codacy-coverage-reporter-assembly.jar https://oss.sonatype.org/service/local/repositories/releases/content/com/codacy/codacy-coverage-reporter/1.0.13/codacy-coverage-reporter-1.0.13-assembly.jar
|
||||||
|
|
||||||
after_success:
|
after_success:
|
||||||
- java -cp ~/codacy-coverage-reporter-assembly.jar com.codacy.CodacyCoverageReporter
|
- java -cp ~/codacy-coverage-reporter-assembly.jar com.codacy.CodacyCoverageReporter -l Java -r build-reporting/target/coverage-reports/jacoco.xml
|
||||||
-l Java -r build-reporting/target/coverage-reports/jacoco.xml
|
- ./coverity_scan.sh
|
||||||
matrix:
|
|
||||||
include:
|
|
||||||
- env: CRON_ONLY=1
|
|
||||||
addons:
|
|
||||||
coverity_scan:
|
|
||||||
project:
|
|
||||||
name: OWASP dependency-check
|
|
||||||
version: 1.0
|
|
||||||
description: A software composition analsis tools that detects publicly
|
|
||||||
disclosed vulnerabilities in application dependencies.
|
|
||||||
build_command: mvn -DskipTests=true package
|
|
||||||
branch_pattern: master
|
|
||||||
|
|||||||
13
coverity_scan.sh
Normal file
13
coverity_scan.sh
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
|
||||||
|
|
||||||
|
if [ $TRAVIS_BRANCH = "master" ] && [ $TRAVIS_EVENT_TYPE = "cron" ] ; then
|
||||||
|
echo "Executing Coverity Scan"
|
||||||
|
fi
|
||||||
|
|
||||||
|
export COVERITY_SCAN_PROJECT_NAME="jeremylong/DependencyCheck"
|
||||||
|
export COVERITY_SCAN_NOTIFICATION_EMAIL="jeremy.long@owasp.org"
|
||||||
|
export COVERITY_SCAN_BRANCH_PATTERN="master"
|
||||||
|
export COVERITY_SCAN_BUILD_COMMAND="mvn package -Dmaven.test.skip=true"
|
||||||
|
|
||||||
|
# Run the Coverity scan
|
||||||
|
curl -s https://scan.coverity.com/scripts/travisci_build_coverity_scan.sh | bash
|
||||||
Reference in New Issue
Block a user