tpm2-software / tpm2-totp

Attest the trustworthiness of a device against a human using time-based one-time passwords
https://tpm2-software.github.io
BSD 3-Clause "New" or "Revised" License
163 stars 36 forks source link

ci: add LGTM #54

Closed diabonas closed 5 years ago

diabonas commented 5 years ago

LGTM is a code analysis platform that scans code for known vulnerabilities and problematic patterns. It is already enabled for tpm2-tss, but using it in this project as well requires some additional help in form of a .lgtm.yml configuration file in order to build and install tpm2-tss from source in LGTM's build environment. This configuration will allow to analyse the code in this project, cf. the successful test build. No further action other than merging this PR is necessary, new code is fetched automatically once a day from GitHub by LGTM.

Depending on the number of problems found, a code quality grade is calculated by LGTM, which can be shown as a badge. Note that this will only start working after this PR has been merged because without the .lgtm.yml, the code is currently not analysed at all.

codecov[bot] commented 5 years ago

Codecov Report

Merging #54 into master will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master      #54   +/-   ##
=======================================
  Coverage   83.48%   83.48%           
=======================================
  Files           4        4           
  Lines         757      757           
=======================================
  Hits          632      632           
  Misses        125      125

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update ace43a6...c62919e. Read the comment docs.