Coverity #102

	---
	# vi: ts=2 sw=2 et:

	name: Coverity

	on:
	schedule:
	# Run Coverity daily at midnight
	- cron: '0 0 * * *'
	pull_request:
	paths:
	- ".github/workflows/coverity.*"

	permissions:
	contents: read

	jobs:
	build:
	runs-on: ubuntu-24.04
	if: github.repository == 'polkit-org/polkit'
	env:
	# Set in repo settings -> Secrets and variables -> Actions -> Repository secrets
	COVERITY_SCAN_TOKEN: "${{ secrets.COVERITY_SCAN_TOKEN }}"
	COVERITY_SCAN_NOTIFICATION_EMAIL: "${{ secrets.COVERITY_SCAN_NOTIFICATION_EMAIL }}"
	steps:
	- name: Repository checkout
	uses: actions/checkout@v4

	- name: Install build dependencies
	run: \|
	sudo sed -i 's/^Types: deb/Types: deb deb-src/g' /etc/apt/sources.list.d/*.sources
	sudo apt update
	sudo apt build-dep -y policykit-1

	# Ubuntu 24.04 ships only meson 1.3.4 (ATTOW), so install a newer one via pip
	dpkg-query -W meson && sudo apt remove -y meson
	sudo pip3 install 'meson>=1.4.0'
	sudo meson --version

	- name: Build & upload the results
	run: .github/workflows/coverity.sh

Provide feedback