Comments (11)
Sure, I'd love that I've used coverity before, I think it's great but hadn't tried to set up the automation. Is the secret token based on this: https://docs.github.com/en/actions/security-guides/encrypted-secrets ? Or something else?
What permissions do you need? Just write access to the repo?
from libmcrx.
from libmcrx.
OK, I sent an invite, if accepted I believe you'll have direct access and should hopefully bbe able to add the token. Thanks for doing all this, I think it's really helping the robustness to get these tools checking it, much obliged :)
from libmcrx.
from libmcrx.
It seems to say that's the only one besides owner, which can't be shared:
https://docs.github.com/en/account-and-profile/setting-up-and-managing-your-github-user-account/managing-user-account-settings/permission-levels-for-a-user-account-repository
Can you screenshot the error you hit to add a secret token? Maybe that'll help find a workaround?
from libmcrx.
from libmcrx.
from libmcrx.
OK, this page says only the repo owner can add secrets:
https://docs.github.com/en/actions/security-guides/encrypted-secrets
So I went and added this repo as a coverity project and saved the token as COVERITY_SCAN_TOKEN, both for the repo and for a new "CoverityScan" environment (not sure if that's needed, but just in case). I ran an initial build with their tarbball and uploaded the results at https://scan.coverity.com/projects/grumpyoldtroll-libmcrx (it says there's 18 defects but won't let me see them until they review my association with the project and its open source compliance).
Is that enough to go ahead with bringing up the automation?
from libmcrx.
from libmcrx.
Confirmed the project name "GrumpyOldTroll/libmcrx" works with this command line:
wget -q https://scan.coverity.com/download/linux64 --post-data "token=$TOKEN&project=GrumpyOldTroll%2Flibmcrx" -O cov-analysis-linux64.tar.gz
The token name is COVERITY_SCAN_TOKEN, so the same ${{ secrets.COVERITY_SCAN_TOKEN }} should work, if I understand the docs correctly.
from libmcrx.
from libmcrx.
Related Issues (17)
- App receives packets from the wrong source address on a group+port collision.
- Update configure.ac
- Update .gitignore HOT 1
- Ubuntu 20 LTS issues HOT 2
- GitHub Action HOT 2
- wrap_stderr warning
- family value never read
- Unreachable code in native_receive() HOT 2
- Unreachable code in mcrx_subscription_native_join() HOT 3
- Unreachable code in mcrx_prv_remove_socket_cb() HOT 2
- Add SonarCloud
- Add Codacy
- Segfault in mcrx-check if no options given HOT 2
- Removing unused headers and functions HOT 2
- Add "make check" runs in repo/pr automation HOT 1
- Make coverity scans conditional on changes
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from libmcrx.