coverity-audit

Fetch Coverity Scan defect lists and per-defect details via JSON API.

80.1k|6.6k|Updated Jun 17, 2013
One-click install
npx skills add https://github.com/netdata/netdata --skill coverity-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: coverity-audit
Source: https://github.com/netdata/netdata/tree/main/.agents/skills/coverity-audit
Command: npx skills add https://github.com/netdata/netdata --skill coverity-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, jq, and includes scripts (resource) components.

What problem does it solve?

Triage Coverity Scan defects by programmatically fetching defect lists and per-defect details via an unofficial JSON API, enabling deterministic review workflows for projects configured in the repository. Scripts auto-detect the repo root and write all artifacts under <repo-root>/.local/audits/coverity/.

Core Features & Use Cases

  • Fetch defect lists for the Outstanding view and other project views, surfacing context for triage.
  • Retrieve per-defect details and source context to inform verdicts and actions.
  • Apply triage decisions (Bug / False Positive / Intentional with severity, action, and a comment) and write results under <repo-root>/.local/audits/coverity/.

Quick Start

Configure a fresh cookie in .env and run fetch-table.sh to begin listing defects.

Frequently Asked Questions about coverity-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Coverity Scan defect triage using the API?

You can triage Coverity Scan defects by fetching defect lists and per-defect details via an unofficial JSON API, applying verdicts like Bug or False Positive, and writing results to your repository.

What do I need to configure before fetching Coverity defect lists?

Before fetching Coverity defect lists, you need curl and jq installed, a fresh Coverity cookie, and project settings configured in a .env file at your repository root.

Can I apply triage verdicts to Coverity defects programmatically?

Yes, you can programmatically apply triage decisions to Coverity defects by assigning verdicts such as Bug, False Positive, or Intentional, along with severity, action, and a comment.

Where are Coverity audit artifacts and defect bundles stored?

Coverity audit artifacts and per-defect bundles are written to the .local/audits/coverity/ directory at your auto-detected repository root.

Does this Coverity triage workflow use an official API?

No, this workflow relies on an unofficial Coverity Scan JSON API to retrieve defect lists and source context, requiring a valid session cookie configured in your .env file.