tf-m-coverity.yaml

#-------------------------------------------------------------------------------
# Copyright (c) 2020-2023, Arm Limited. All rights reserved.
#
# SPDX-License-Identifier: BSD-3-Clause
#
#-------------------------------------------------------------------------------

- job:
    name: tf-m-coverity
    description: 'Staging - Runs coverity check over the source tree'
    project-type: pipeline
    disabled: false
    sandbox: true
    concurrent: true
    properties:
      - build-discarder:
          days-to-keep: 5
          num-to-keep: 45
    parameters:
      - string:
          name: 'CODE_REPO'
          default: 'https://git.trustedfirmware.org/TF-M/trusted-firmware-m'
      - string:
          name: 'GERRIT_REFSPEC'
          default: 'refs/heads/main'
          description: |
            For use when triggering with unmerged Gerrit changes.
      - string:
          name: 'GERRIT_BRANCH'
          default: 'main'
          description: |
            TF-M branch.
      - string:
          name: 'CI_SCRIPTS_REPO'
          default: 'https://review.trustedfirmware.org/next/ci/tf-m-ci-scripts'
      - string:
          name: 'CI_SCRIPTS_BRANCH'
          default: 'master'
      - string:
          name: 'MBEDTLS_VERSION'
          default: ''
      - string:
          name: 'MBEDTLS_URL'
          default: 'https://git.trustedfirmware.org/mirror/mbed-tls.git'
      - string:
          name: 'MCUBOOT_URL'
          default: 'https://git.trustedfirmware.org/mirror/mcuboot.git'
      - string:
          name: 'MCUBOOT_REFSPEC'
          default: ''
          description: |
            Specify which MCUboot version to use
            refs/heads/master    : Pick up latest master
            refs/tags/<TAG_NAME> : Pick up a tagged version
      - string:
          name: 'TFM_EXTRAS_URL'
          default: 'https://git.trustedfirmware.org/TF-M/tf-m-extras.git'
      - string:
          name: 'TFM_EXTRAS_REFSPEC'
          default: ''
      - string:
          name: 'TFM_TESTS_URL'
          default: 'https://git.trustedfirmware.org/TF-M/tf-m-tests.git'
      - string:
          name: 'TFM_TESTS_REFSPEC'
          default: ''
      - string:
          name: 'QCBOR_URL'
          default: 'https://github.com/laurencelundblade/QCBOR.git'
      - string:
          name: 'QCBOR_VERSION'
          default: ''
      - string:
            name: COVERITY_VERSION
            default: '2022.6.0'
      - bool:
            name: UPLOAD_TO_COVERITY_SCAN_ONLINE
            default: true
            description: |-
              Whether the resulting tarball should be automatically uploaded to Coverity Scan Online.
              <p>
              <b style="color:red;">The number of uploads allowed on Coverity Scan Online is LIMITED.
              Therefore, if you don't need the results to be analysed, please UNTICK this box!<b>
    wrappers:
        - timestamps
    pipeline-scm:
      scm:
        - git:
            url: '$CI_SCRIPTS_REPO'
            branches:
            - '$CI_SCRIPTS_BRANCH'
            credentials-id: GIT_SSH_KEY
            wipe-workspace: false
      script-path: jenkins/coverity.jpl