#!/bin/bash # # SPDX-License-Identifier: GPL-2.0-only # PARENTDIR=`realpath $1` TARGETDIR=`realpath $2` RESULTSDIR=`realpath -m $3` BUILDDIR=`realpath $4` OURDIR=`dirname $0` TIMESTAMP=`date +"%s"` # # Patch Metrics # git clone ssh://git@push.yoctoproject.org/yocto-metrics $PARENTDIR/yocto-metrics $OURDIR/patchmetrics-update --repo $PARENTDIR --patchscript $PARENTDIR/scripts/contrib/patchreview.py --metadata $TARGETDIR --json $PARENTDIR/yocto-metrics/patch-status.json git -C $PARENTDIR/yocto-metrics commit -asm "Autobuilder adding new patch stats" git -C $PARENTDIR/yocto-metrics push if [ ! -d $RESULTSDIR ]; then mkdir $RESULTSDIR fi cp $PARENTDIR/yocto-metrics/patch-status.json $RESULTSDIR cp $PARENTDIR/yocto-metrics/patch-status/* $RESULTSDIR # # CVE Checks # mkdir -p $PARENTDIR/yocto-metrics/cve-check/ for branch in master kirkstone dunfell; do git -C $PARENTDIR reset origin/$branch --hard bitbake world --runall cve_check -R conf/distro/include/cve-extra-exclusions.inc cp tmp/log/cve/cve-summary.json $PARENTDIR/yocto-metrics/cve-check-$branch-$TIMESTAMP.json git -C $PARENTDIR/yocto-metrics add cve-check-$branch-$TIMESTAMP.json git -C $PARENTDIR/yocto-metrics commit -asm "Autobuilder adding new CVE data for branch $branch" git -C $PARENTDIR/yocto-metrics push $OURDIR/cve-report.py tmp/log/cve/cve-summary.json > $RESULTSDIR/cve-status-$branch.txt done