Re: Coverity Scan model file, license, public access

From: Kroah-Hartman
Date: Tue Jul 06 2021 - 14:42:03 EST


On Tue, Jul 06, 2021 at 08:34:16PM +0200, Norbert Manthey wrote:
> With respect to sharing the results: we are allowed to upstream fixes
> that we find with the tool. We contributed in that way already, e.g. [2].

Yes, that is how many companies do this and have for a long time
(Canonical does this a lot). But that puts all the work on you, and you
can not share the results of the tool with anyone, so you are forced to
do the work to fix problems the tool reports, which feels really wrong
when you are dealing with a scan of a public source tree...

thanks,

greg k-h