Due to change in priorities and lack of activity, this repo is currently not being supported and is archived as of 07/06/22. Please note since archival, the project is not maintained and will be available in a read-only state. Please reach out to [email protected] should you have any questions.

Hygieia Security Collectors / Coverity

Coverity finds software issues of several kinds; however, coverity-collector is only intended to gather security issues.

This project uses Spring Boot to package the collector as an executable JAR with dependencies.

Building and Deploying

This collector makes SOAP calls; so wsdl files are required. Update the pom.xml at jaxws-maven-plugin configuration with the wsdl Urls, which is the Coverity Connect server address followed by the paths already given in the pom.xml.

Run the following command to package the collector into an executable jar. Find the jar file at target/.

mvn clean install package

Copy this file to your server and launch it using:

java -jar coverity-collector.jar --spring.config.location=[path to application.properties file]

application.properties

You will need to provide an application.properties file that contains information about how to connect to the Dashboard MongoDB database instance, as well as properties the Coverity collector requires. See the Spring Boot documentation for information about sourcing this properties file.

Sample application.properties file

# Database Name
dbname=dashboard

# Database HostName - default is localhost
dbhost=10.0.1.1

# Database Port - default is 27017
dbport=27017

# Database Username - default is blank
dbusername=db

# Database Password - default is blank
dbpassword=dbpass


# Collector schedule (required)
coverity.cron=0 0/5 * * * *