Merge pull request #2329 from nschonni/coverity_scan

Coverity scan

.travis.yml

@@ -16,6 +16,12 @@ sudo: false
 # built with coverage, clang and autotools
 # - AUTOTOOLS=yes COVERAGE=yes BUILD=shared
 
+env:
+  global:
+   # The next declaration is the encrypted COVERITY_SCAN_TOKEN, created
+   #   via the "travis encrypt" command using the project repo's public key
+   - secure: "TpS3uet31wPj8l5yjKFMKNHOIHp1Z0W601mCyToSn1+Rp3c6TQAT8kxRmIqp7Etfq7vX+M+KLyEyJZhq0aqmcnov+jm7zvPjNTAV8VrnDL7XdE5cxwqXsxPKCpEnHOAvuCRP0bDYfcK4ds+SP+zIrlFNb83rb+JENHcnDUza5LE="
+
 matrix:
   include :
     - os: linux
@@ -40,6 +46,11 @@ matrix:
             - llvm-toolchain-precise-3.7
           packages:
             - clang-3.7
+        coverity_scan:
+          project:
+            name: "sass/libsass"
+          build_command: ./script/ci-build-libsass
+          branch_pattern: coverity_scan
     - os: linux
       compiler: clang
       env: AUTOTOOLS=yes COVERAGE=no BUILD=shared

script/ci-install-deps

@@ -6,6 +6,10 @@ else
   echo "no dependencies to install"
 fi
 
+if [ "x$COVERITY_SCAN_BRANCH" != "x" ]; then
+  echo -n | openssl s_client -connect scan.coverity.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' | sudo tee -a /etc/ssl/certs/ca-
+fi
+
 if [ "x$AUTOTOOLS" == "xyes" ]; then
   AUTOTOOLS=yes