Coverity (#613)

KostyaSha · web-flow · commit 2bd837f0187e · 2016-06-20T10:54:50.000+03:00
- more badges
- coverity verification on master on main (fast/successful) build.
diff --git a/.travis.yml b/.travis.yml
@@ -8,14 +8,22 @@ services:
 jdk:
  - oraclejdk7
 
+install: true
+
 env:
   global:
     - DOCKER_TLS_VERIFY=""
+    # The next declaration is the encrypted COVERITY_SCAN_TOKEN, created
+    #   via the "travis encrypt" command using the project repo's public key
+    - secure: "GonzmzvnXsTNQV+6sKtBSSPiwbpMZjxumNt5LFp1g77/afLxw9kl2EQOXbUe308vFOwRVqeY7drBvNJa8aJkTUClfMaGRjfZ9DUwm6doMKMUYrdEkYoQTcH7yDX5K5w9MT6m+Izj+BK2gB7nK3yFlYG6COeXCdFbQ4/cf3/xfRc="
+    - COVERITY_SCAN_PROJECT_NAME="docker-java/docker-java"
+    - COVERITY_SCAN_BRANCH_PATTERN="master"
+    - COVERITY_SCAN_NOTIFICATION_EMAIL="kanstantsin.sha@gmail.com"
 
   matrix:
-    - repo="main"  DOCKER_HOST="tcp://127.0.0.1:2375" DOCKER_VERSION="1.11.2-0~trusty" FAST_BUILD=true
+    - repo="main" DOCKER_HOST="tcp://127.0.0.1:2375" DOCKER_VERSION="1.11.2-0~trusty" DEPLOY=true FAST_BUILD=true COVERITY=true
     - repo="main" DOCKER_HOST="tcp://127.0.0.1:2375" DOCKER_VERSION="1.11.2-0~trusty"
-    - repo="main" DOCKER_HOST="unix:///var/run/docker.sock" DOCKER_VERSION="1.11.2-0~trusty" DEPLOY=true
+    - repo="main" DOCKER_HOST="unix:///var/run/docker.sock" DOCKER_VERSION="1.11.2-0~trusty"
     - repo="main" DOCKER_HOST="unix:///var/run/docker.sock" DOCKER_VERSION="1.10.3-0~trusty"
     - repo="testing" DOCKER_HOST="tcp://127.0.0.1:2375"
     - repo="testing" DOCKER_HOST="unix:///var/run/docker.sock"
@@ -31,7 +39,8 @@ before_install:
   - pip install --user codecov
   - ./travis-before-install.sh
 
-script: if [ "${FAST_BUILD}" == true ]; then mvn package ; else mvn verify; fi
+script:
+  - ./travis-script.sh
 
 after_success:
   - ./travis-after-success.sh
diff --git a/README.md b/README.md
@@ -1,4 +1,6 @@
 [![Build Status](https://travis-ci.org/docker-java/docker-java.svg?branch=master)](https://travis-ci.org/docker-java/docker-java)
+[![Coverity Scan Build Status](https://scan.coverity.com/projects/9177/badge.svg?flat=1)](https://scan.coverity.com/projects/9177)
+[![codecov.io](http://codecov.io/github/docker-java/docker-java/coverage.svg?branch=master)](http://codecov.io/github/docker-java/docker-java?branch=master)
 <!--[![Circle CI](https://circleci.com/gh/docker-java/docker-java.svg?style=svg)](https://circleci.com/gh/docker-java/docker-java)-->
 # docker-java 
 
diff --git a/travis-before-install.sh b/travis-before-install.sh
@@ -1,6 +1,11 @@
 #!/usr/bin/env bash
 
 
+sudo apt-get install -y -q ca-certificates
+
+echo -n | openssl s_client -connect scan.coverity.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' | sudo tee -a /etc/ssl/certs/ca-certificates.crt
+
+
 if [ "$FAST_BUILD" == true ]; then
     echo "Fast build, skipping docker installations."
     exit 0
diff --git a/travis-script.sh b/travis-script.sh
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+set -ex
+
+IS_COVERITY_SCAN_BRANCH=`ruby -e "puts '${TRAVIS_BRANCH}' =~ /\\A$COVERITY_SCAN_BRANCH_PATTERN\\z/ ? 1 : 0"`
+
+
+if [ "${FAST_BUILD}" == "true" ]; then
+    if [ "$COVERITY" == "true" ] && [ "$IS_COVERITY_SCAN_BRANCH" = "1" ]; then
+        export COVERITY_SCAN_BUILD_COMMAND="mvn package"
+        curl -s "https://scan.coverity.com/scripts/travisci_build_coverity_scan.sh" | bash
+    else
+        mvn package
+    fi
+else
+    if [ "$COVERITY" == "true" ] && [ "$IS_COVERITY_SCAN_BRANCH" = "1" ]; then
+        COVERITY_SCAN_BUILD_COMMAND="mvn verify"
+        curl -s "https://scan.coverity.com/scripts/travisci_build_coverity_scan.sh" | bash
+    else
+        mvn verify
+    fi
+fi
