yocto-autobuilder-helper/scripts/run-patchmetrics
Richard Purdie 5fee00855e yocto-metrics: Add langdale CVE monitoring
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-10-28 13:30:19 +01:00

64 lines
2.4 KiB
Bash
Executable File

#!/bin/bash
#
# SPDX-License-Identifier: GPL-2.0-only
#
PARENTDIR=`realpath $1`
TARGETDIR=`realpath $2`
RESULTSDIR=`realpath -m $3`
BUILDDIR=`realpath $4`
OURDIR=`dirname $0`
TIMESTAMP=`date +"%s"`
#
# Patch Metrics
#
git clone ssh://git@push.yoctoproject.org/yocto-metrics $PARENTDIR/yocto-metrics
$OURDIR/patchmetrics-update --repo $PARENTDIR --patchscript $PARENTDIR/scripts/contrib/patchreview.py --metadata $TARGETDIR --json $PARENTDIR/yocto-metrics/patch-status.json
git -C $PARENTDIR/yocto-metrics commit -asm "Autobuilder adding new patch stats"
git -C $PARENTDIR/yocto-metrics push
if [ ! -d $RESULTSDIR ]; then
mkdir $RESULTSDIR
fi
$OURDIR/patchmetrics-generate-chartdata --json $PARENTDIR/yocto-metrics/patch-status.json --outputdir $RESULTSDIR
cp $PARENTDIR/yocto-metrics/patch-status.json $RESULTSDIR
cp $PARENTDIR/yocto-metrics/patch-status/* $RESULTSDIR
#
# CVE Checks
#
for branch in master langdale kirkstone dunfell; do
mkdir -p $PARENTDIR/yocto-metrics/cve-check/$branch/
git -C $PARENTDIR reset origin/$branch --hard
rm conf/local.conf
rm conf/bblayers.conf
rm -f conf/templateconf.cfg
rm tmp/ -rf
unset BB_ENV_PASSTHROUGH_ADDITIONS
unset BB_ENV_EXTRAWHITE
cd ..
. oe-init-build-env build
bitbake world --runall cve_check -R conf/distro/include/cve-extra-exclusions.inc
if [ -e tmp/log/cve/cve-summary.json ]; then
git -C $PARENTDIR/yocto-metrics rm cve-check/$branch/*.json
mkdir -p $PARENTDIR/yocto-metrics/cve-check/$branch
cp tmp/log/cve/cve-summary.json $PARENTDIR/yocto-metrics/cve-check/$branch/$TIMESTAMP.json
git -C $PARENTDIR/yocto-metrics add cve-check/$branch/$TIMESTAMP.json
git -C $PARENTDIR/yocto-metrics commit -asm "Autobuilder adding new CVE data for branch $branch"
git -C $PARENTDIR/yocto-metrics push
$OURDIR/cve-report.py tmp/log/cve/cve-summary.json > $RESULTSDIR/cve-status-$branch.txt
fi
done
mkdir -p $PARENTDIR/yocto-metrics/cve-check/
$OURDIR/cve-generate-chartdata --json $PARENTDIR/yocto-metrics/cve-count-byday.json --resultsdir $PARENTDIR/yocto-metrics/cve-check/
git -C $PARENTDIR/yocto-metrics add cve-count-byday.json
git -C $PARENTDIR/yocto-metrics commit -asm "Autobuilder updating CVE counts"
git -C $PARENTDIR/yocto-metrics push
cp $PARENTDIR/yocto-metrics/cve-count-byday.json $RESULTSDIR
cp $PARENTDIR/yocto-metrics/cve-count-byday-lastyear.json $RESULTSDIR