ci: clang scan workflow

2 files changed, 37 insertions, 0 deletions

diff --git a/.github/workflows/clang.yml b/.github/workflows/clang.yml
new file mode 100644
index 00000000..15ccd31d
--- /dev/null
+++ b/.github/workflows/clang.yml
@@ -0,0 +1,35 @@
+name: Clang Scan
+
+on:
+  schedule:
+    - cron: '0 23 * * *' # Daily at 23:00 UTC
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - name: install dependencies
+      run: |
+        wget https://apt.llvm.org/llvm.sh
+        chmod +x llvm.sh
+        sudo ./llvm.sh 9
+        sudo apt install \
+        clang-tools-9 \
+        libasr-dev \
+        libevent-dev \
+        libssl-dev \
+        bison
+    - uses: actions/checkout@v1
+    - name: run scan-build
+      run: |
+        export PATH=$PATH:/usr/lib/llvm-9/bin/
+        CLANG_SCAN_BADGE_REQUIRED=1 ci/scripts/clang_scan.sh
+    - name: publish results
+      run: |
+        aws s3 rm --recursive s3://opensmtpd/reports/clang/
+        cd clang-report
+        cd "$( find  . -type d | sort | tail -n1 )"
+        aws s3 sync . s3://opensmtpd/reports/clang
+      env:
+        AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+        AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
diff --git a/README.md b/README.md
index 81959ce2..9de67dc6 100644
--- a/README.md
+++ b/README.md
@@ -4,6 +4,8 @@
 [![Coverity Scan analysis](https://scan.coverity.com/projects/278/badge.svg)](https://scan.coverity.com/projects/opensmtpd-opensmtpd)
 [![Packaging status](https://repology.org/badge/tiny-repos/opensmtpd.svg)](https://repology.org/project/opensmtpd/versions)
 [![License: ISC](https://img.shields.io/badge/License-ISC-blue.svg)](https://www.isc.org/licenses/)
+[![Clang Analysis](https://opensmtpd.email/reports/clang/badge.svg)](https://opensmtpd.email/reports/clang/index.html)
+
 
 OpenSMTPD is a FREE implementation of the server-side SMTP protocol as
 defined by [RFC 5321](https://tools.ietf.org/html/rfc5321), with some