submit a repo to scan Nim csource

[ringabout]

A repo to generate Nim source automatically based on every commits

then use Coverity Scan(which is free for open source) to scan Nim source

see https://scan.coverity.com/projects

[timotheecour]

is there a proof of concept to show that this can potentially be useful for nim sources?

[ringabout]

well.I mean C source

[timotheecour]

can you show (or show a link) examples where it gives useful feedback on C sources?

[ringabout]

https://scan.coverity.com/projects/01org-libyami
?

well, it needs access.

[ringabout]

Oh, you can see from successful stores.

https://scan.coverity.com/o/oss_success_stories

[timotheecour]

thanks, that makes things more concrete. Some of the diagnostics are indeed useful.

Curious:

• how it compares to what valgrind would show
• whether it'd have utility on C sources generated from nim sources
• what's the signal to noise ratio (ie whether it generates lots of not so useful diagnostics)

note also that we ignore warnings (-w) which has caused bugs in the past (refs nim-lang#11591)

[ringabout]

Well it works like CI, submit a link to scan it automatically, free for open source.