Coverity #729

	name: Coverity

	on:
	workflow_dispatch:
	schedule:
	- cron: "0 0 * * *"

	jobs:
	scan:
	runs-on: ubuntu-latest
	if: ${{ github.repository_owner == 'libressl' }}
	steps:
	- uses: actions/checkout@main
	- name: Install apt dependencies
	run: \|
	sudo apt-get update
	sudo apt-get install -y cmake ninja-build
	- name: Download Coverity build tool
	run: \|
	wget -c -N https://scan.coverity.com/download/linux64 --post-data "token=${{ secrets.COVERITY_SCAN_TOKEN }}&project=libressl-portable%2Fportable" -O coverity_tool.tar.gz
	mkdir coverity_tool
	tar xzf coverity_tool.tar.gz --strip 1 -C coverity_tool
	- name: Configure
	run: \|
	./autogen.sh
	./configure
	make dist
	tar zxf libressl-*.tar.gz
	rm libressl-*.tar.gz
	cd libressl-*
	mkdir build-static
	mkdir build-shared
	cmake -GNinja -DBUILD_SHARED_LIBS=ON ..
	- name: Build with Coverity build tool
	run: \|
	export PATH=`pwd`/coverity_tool/bin:$PATH
	cd libressl-*
	cov-build --dir cov-int ninja
	- name: Submit build result to Coverity Scan
	run: \|
	cd libressl-*
	tar czvf cov.tar.gz cov-int
	curl --form token=${{ secrets.COVERITY_SCAN_TOKEN }} \
	--form [email protected] \
	--form [email protected] \
	--form version="Commit $GITHUB_SHA" \
	--form description="Build submitted via CI" \
	https://scan.coverity.com/builds?project=libressl-portable%2Fportable

Provide feedback