Skip to content

task: opensource coverity - #148

Open
jharlow-intel wants to merge 2 commits into
masterfrom
task/coverity
Open

task: opensource coverity#148
jharlow-intel wants to merge 2 commits into
masterfrom
task/coverity

Conversation

@jharlow-intel

Copy link
Copy Markdown
Collaborator

https://scan.coverity.com/projects/intelpython-mkl_random?tab=overview

After reviewing their terms, seems we can use their open source dashboard and free scanner.

Set the scan to weekly to make sure we don't go over our quota

Comment thread .github/workflows/coverity.yml
Comment thread .github/workflows/coverity.yml Outdated
Comment thread .github/workflows/coverity.yml Outdated
Comment thread .github/workflows/coverity.yml Outdated
Comment thread .github/workflows/coverity.yml
@jharlow-intel
jharlow-intel requested a review from antonwolfy July 28, 2026 17:04
# Forks lack the COVERITY_SCAN_* secrets; only run on the canonical repo.
if: github.repository == 'IntelPython/mkl_random'
runs-on: ubuntu-latest

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add timeout-minutes to prevent potential cov-build hanging

ln -s "${rt_so[0]}" "${MKLROOT}/lib/libmkl_rt.so"
fi
echo "MKLROOT=${MKLROOT}" >> "$GITHUB_ENV"
echo "LD_LIBRARY_PATH=${MKLROOT}/lib:${LD_LIBRARY_PATH}" >> "$GITHUB_ENV"

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If LD_LIBRARY_PATH is unset, ${MKLROOT}/lib:${LD_LIBRARY_PATH} writes .../lib: — a trailing empty element means "current directory" in the loader path, to fix that:

Suggested change
echo "LD_LIBRARY_PATH=${MKLROOT}/lib:${LD_LIBRARY_PATH}" >> "$GITHUB_ENV"
echo "LD_LIBRARY_PATH=${MKLROOT}/lib${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}" >> "$GITHUB_ENV"

Comment on lines +43 to +44
with:
fetch-depth: 0

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No need to fetch git history:

Suggested change
with:
fetch-depth: 0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants