From dceb29a6f5e8b0fb5e21d14c39013efcbb9203ee Mon Sep 17 00:00:00 2001
From: Mike Frysinger <vapier@gentoo.org>
Date: Tue, 5 Oct 2021 07:39:45 -0400
Subject: [PATCH] CI: enable Coverity Scan integration

---
 .github/workflows/coverity.yml | 55 ++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 .github/workflows/coverity.yml

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
new file mode 100644
index 0000000..2042469
--- /dev/null
+++ b/.github/workflows/coverity.yml
@@ -0,0 +1,55 @@
+# GitHub actions workflow.
+# https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions
+
+# https://scan.coverity.com/projects/libgd
+name: Coverity Scan
+
+# Only want to analyze official releases, not any pull requests.
+# The free service doesn't have enough bandwidth for both.
+on:
+  push:
+    branches: [master, GD-*]
+
+jobs:
+  coverity:
+    strategy:
+      matrix:
+        os: [ubuntu-latest]
+        cc: [gcc]
+    runs-on: ${{ matrix.os }}
+    env:
+      CC: ${{ matrix.cc }}
+    steps:
+    - name: Install dependencies
+      run: sudo apt-get install -y
+               libavifile-0.7-dev
+               libde265-dev
+               libfreetype-dev
+               libheif-dev
+               libimagequant-dev
+               libjpeg-turbo8-dev
+               libpng-dev
+               libraqm-dev
+               libtiff5-dev
+               libwebp-dev
+               libx265-dev
+               libxpm-dev
+    - uses: actions/checkout@v2
+    - name: Configure gd
+      run: cmake
+               -DENABLE_CPP=1
+               -DENABLE_FREETYPE=1
+               -DENABLE_GD_FORMATS=1
+               -DENABLE_HEIF=0
+               -DENABLE_JPEG=1
+               -DENABLE_PNG=1
+               -DENABLE_TIFF=1
+               -DENABLE_WEBP=1
+               -DBUILD_TEST=1
+               -B ${{github.workspace}}/build
+    - uses: vapier/coverity-scan-action@v0
+      with:
+        project: libgd%2Flibgd
+        email: security@libgd.org
+        token: ${{ secrets.COVERITY_SCAN_TOKEN }}
+        command: make -C ${{github.workspace}}/build