Coverity #626

	name: Coverity

	on:
	push:
	branches:
	- master
	schedule:
	- cron: '0 16 * * 2,4,6'

	jobs:
	coverity:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Set up Buildx
	uses: docker/setup-buildx-action@v3
	- name: Build Image
	uses: docker/build-push-action@v5
	with:
	context: .
	tags: coverity-img:latest
	load: true
	pull: true
	cache-to: type=gha,mode=max
	cache-from: type=gha
	- name: Run Coverity
	run: \|
	set -e
	docker run --name cov-worker --env COVERITY_SCAN_NOTIFICATION_EMAIL --env COVERITY_SCAN_TOKEN --env COVERITY_DRY_RUN coverity-img
	docker cp cov-worker:/root/cov-int.tgz cov-int.tgz
	env:
	COVERITY_SCAN_NOTIFICATION_EMAIL: ${{ secrets.COVERITY_SCAN_NOTIFICATION_EMAIL }}
	COVERITY_SCAN_TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}
	COVERITY_DRY_RUN: ${{ github.event_name != 'schedule' }}
	- name: Upload artifact
	uses: actions/upload-artifact@v4
	with:
	name: cov-int
	path: cov-int.tgz
	keepalive:
	name: Keepalive Workflow
	runs-on: ubuntu-latest
	permissions:
	actions: write
	steps:
	- uses: actions/checkout@v4
	- uses: gautamkrishnar/keepalive-workflow@v2

Provide feedback