On 14 November 2018 at 12:02, Paolo Bonzini <pbonz...@redhat.com> wrote: >> ENV COVERITY_TOOL_BASE=/coverity-tools >> COPY run-coverity-scan run-coverity-scan >> RUN --mount=type=secret,id=coverity.token,required ./run-coverity-scan >> --update-tools-only --tokenfile /run/secrets/coverity.token > > If the tokenfile is not needed when updating the tools, you could also > move the Dockerfile to tests/docker/dockerfiles/fedora-coverity.docker > and just do "make docker-image-fedora-coverity"
It is needed when updating the tools, which is why I had to mess around with the secrets to pass it in. (Specifically, you have to pass the token to the Coverity web site to be able to download the tools zipfile.) thanks -- PMM
