Klocwork is a static analysis tool used to scan software code at build time for security and logic flaws.
https://help.klocwork.com/current/en-us/concepts/home.htm
配置好server license 等相关信息之后可以在本地编译、扫描、上传报告。
在coverity desktop 中create project之后，本地会生成project_roots folder
之后运行
kwshell -pd C:\Users\ <>\klocwork_projects\ <project>\ .kwlp
kwinject [build commamd]
kwbuildproject --verbose --url [klocwork server] --license-host [] --license-port [] --tables-directory [kw scan results] --force --add-compiler-options " -I C:\Program Files\Microchip\xc16\v2.10\include " kwinject.out
kwadmin --verbose --url [KW server] load [KW project] <tables-directory> --name builds_name
KW project: server端之前创建好的project
增量扫描针对一个Pull Request的代码，只对当前这个pull request中的.c .cpp .h 文件进行扫描检测
kwcheck create --url [KW server]/[KW project]
kwshell [build command]
kwcheck sync
kwcheck run -r -y [file list]
kwcheck list -y [file list]
对于是否是本次新扫描出来的issue, 可以先使用git checkout -f HEAD~1将代码切换至前一个commit, 然后使用
kwcheck sync
kwcheck run -r -y [file list]
kwcheck list -y [file list]
kwcheck list command会返回file 中的所有issue
将前一个commit的issue 存在一个列表里，然后跟本次的issue进行比对是否有新issue
