coverity-audit

Name: coverity-audit
Availability: InStock
Author: netdata

Fetch Coverity Scan defect lists and per-defect details via JSON API.

80.1k|6.6k|Updated Jun 17, 2013

Search Tags:#automation #api #triage #cookie #defects #coverity #defectInstanceId

Ready to run

npx skills add https://github.com/netdata/netdata --skill coverity-audit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: coverity-audit
Source: https://github.com/netdata/netdata/tree/main/.agents/skills/coverity-audit
Command: npx skills add https://github.com/netdata/netdata --skill coverity-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, jq, and includes scripts (resource) components.

What problem does it solve?

Triage Coverity Scan defects by programmatically fetching defect lists and per-defect details via an unofficial JSON API, enabling deterministic review workflows for projects configured in the repository. Scripts auto-detect the repo root and write all artifacts under <repo-root>/.local/audits/coverity/.

Core Features & Use Cases

Fetch defect lists for the Outstanding view and other project views, surfacing context for triage.
Retrieve per-defect details and source context to inform verdicts and actions.
Apply triage decisions (Bug / False Positive / Intentional with severity, action, and a comment) and write results under <repo-root>/.local/audits/coverity/.

Quick Start

Configure a fresh cookie in .env and run fetch-table.sh to begin listing defects.

Frequently Asked Questions about coverity-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate Coverity Scan defect triage using the API?▼

You can triage Coverity Scan defects by fetching defect lists and per-defect details via an unofficial JSON API, applying verdicts like Bug or False Positive, and writing results to your repository.

What do I need to configure before fetching Coverity defect lists?▼

Before fetching Coverity defect lists, you need curl and jq installed, a fresh Coverity cookie, and project settings configured in a .env file at your repository root.

Can I apply triage verdicts to Coverity defects programmatically?▼

Yes, you can programmatically apply triage decisions to Coverity defects by assigning verdicts such as Bug, False Positive, or Intentional, along with severity, action, and a comment.

Where are Coverity audit artifacts and defect bundles stored?▼

Coverity audit artifacts and per-defect bundles are written to the .local/audits/coverity/ directory at your auto-detected repository root.

Does this Coverity triage workflow use an official API?▼

No, this workflow relies on an unofficial Coverity Scan JSON API to retrieve defect lists and source context, requiring a valid session cookie configured in your .env file.