[tracker/wip/carlosg/ci-coverity] ci: Integrate coverity builds

[Carlos Garnacho <carlosg src gnome org>]

commit df6e72b2edbc4d44f9e85d0dbc19743b14a89be1
Author: Carlos Garnacho <carlosg gnome org>
Date:   Fri Feb 28 16:30:46 2020 +0100

    ci: Integrate coverity builds
    
    This goes to (atm) its own "analysis" stage, and builds the package
    with the coverity tool, so the results are uploaded to the coverity
    site for analysis. This only happens for the master branch as there
    is a limit on weekly builds, so can't be free for every change.
    
    The script relies on the COVERITY_TOKEN envvar being set, which should
    be done through project settings so it stays private.

 .gitlab-ci.yml | 21 ++++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)
---
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 25f4f0317..43c773bb7 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -12,7 +12,7 @@ variables:
 
 stages:
   - test
-
+  - analysis
 
 .test_template: &test
   stage: test
@@ -59,3 +59,22 @@ test-fedora-latest:
 test-ubuntu-rolling:
   image: registry.gitlab.gnome.org/gnome/tracker-oci-images/amd64/ubuntu:rolling
   <<: *test
+
+coverity:
+  stage: analysis
+  image: registry.gitlab.gnome.org/gnome/tracker-oci-images/amd64/fedora:latest
+  allow_failure: true
+  script:
+    - dnf install -y clang
+    - su tracker -c 'curl https://scan.coverity.com/download/linux64 --data 
"token=$COVERITY_TOKEN&project=Tracker" --output /tmp/coverity_tool.tgz'
+    - su tracker -c 'tar zxf /tmp/coverity_tool.tgz'
+    - su tracker -c 'mkdir coverity-build'
+    - su tracker -c 'export CC=clang; cd coverity-build; meson ..'
+    - su tracker -c 'cd coverity-build; ../cov-analysis-linux64-*/bin/cov-build --dir cov-int ninja'
+    - su tracker -c 'cd coverity-build; tar czf cov-int.tar.gz cov-int'
+    - su tracker -c 'curl https://scan.coverity.com/builds?project=Tracker
+      --form token=$COVERITY_TOKEN --form email=carlosg gnome org
+      --form file=@coverity-build/cov-int.tar.gz --form version="`git describe --tags`"
+      --form description="gitlab CI build"'
+  only:
+    - master