3 ms·
I would be surprised if Coverity was integrated into any open source project's build system. All due respect to the Coverity folks, and Coverity is a great tool
by npsimons 12y ago
I would be surprised if Coverity was integrated into any open source project's build system. All due respect to the Coverity folks, and Coverity is a great tool, it's still closed source. To be honest, I suspect the Coverity folks are getting as much (or more) out of running their tool against these projects as the projects are. I would like to see the scan results opened up too, which would be in keeping with the open nature of these projects. I'm willing to bet there's paranoia about competition duplicating features from Coverity, so that would explain why they limit it to comitter access (and required signing an NDA last I checked).
EDIT: I stand corrected - Python has integrated Coverity into their builds:
https://docs.python.org/devguide/coverity.html https://docs.python.org/devguide/coverity.html
It still bothers me that the scan reports aren't open; it feels antithetical to the nature and spirit of open source software.