
Keeping all the previous json files in tree has too much overhead so drop the old ones. Honister doesn't support cve-check with json. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2.2 KiB
Executable File
#!/bin/bash
SPDX-License-Identifier: GPL-2.0-only
PARENTDIR=realpath $1
TARGETDIR=realpath $2
RESULTSDIR=realpath -m $3
BUILDDIR=realpath $4
OURDIR=dirname $0
TIMESTAMP=date +"%s"
Patch Metrics
git clone ssh://git@push.yoctoproject.org/yocto-metrics $PARENTDIR/yocto-metrics $OURDIR/patchmetrics-update --repo $PARENTDIR --patchscript $PARENTDIR/scripts/contrib/patchreview.py --metadata $TARGETDIR --json $PARENTDIR/yocto-metrics/patch-status.json git -C $PARENTDIR/yocto-metrics commit -asm "Autobuilder adding new patch stats" git -C $PARENTDIR/yocto-metrics push
if [ ! -d $RESULTSDIR ]; then mkdir $RESULTSDIR fi
$OURDIR/patchmetrics-generate-chartdata --json $PARENTDIR/yocto-metrics/patch-status.json --outputdir $RESULTSDIR cp $PARENTDIR/yocto-metrics/patch-status.json $RESULTSDIR cp $PARENTDIR/yocto-metrics/patch-status/* $RESULTSDIR
CVE Checks
for branch in master kirkstone dunfell; do mkdir -p $PARENTDIR/yocto-metrics/cve-check/$branch/ git -C $PARENTDIR reset origin/$branch --hard rm conf/local.conf rm conf/bblayers.conf rm tmp/ -rf unset BB_ENV_PASSTHROUGH_ADDITIONS unset BB_ENV_EXTRAWHITE cd .. . oe-init-build-env build bitbake world --runall cve_check -R conf/distro/include/cve-extra-exclusions.inc if [ -e tmp/log/cve/cve-summary.json ]; then git -C $PARENTDIR/yocto-metrics rm cve-check/$branch/*.json cp tmp/log/cve/cve-summary.json $PARENTDIR/yocto-metrics/cve-check/$branch/$TIMESTAMP.json git -C $PARENTDIR/yocto-metrics add cve-check/$branch/$TIMESTAMP.json git -C $PARENTDIR/yocto-metrics commit -asm "Autobuilder adding new CVE data for branch $branch" git -C $PARENTDIR/yocto-metrics push $OURDIR/cve-report.py tmp/log/cve/cve-summary.json > $RESULTSDIR/cve-status-$branch.txt fi done
$OURDIR/cve-generate-chartdata --json $PARENTDIR/yocto-metrics/cve-count-byday.json --resultsdir $PARENTDIR/yocto-metrics/cve-check/ git -C $PARENTDIR/yocto-metrics add cve-count-byday.json git -C $PARENTDIR/yocto-metrics commit -asm "Autobuilder updating CVE counts" git -C $PARENTDIR/yocto-metrics push
cp $PARENTDIR/yocto-metrics/cve-count-byday.json $RESULTSDIR