tree d413cf804ef51fb1437b9ec5bacea4232b019615
parent 6ed4075c3c06b35cbd8316f2121073c600fcc089
author Paolo Bonzini <pbonzini@redhat.com> 1587566337 -0400
committer Paolo Bonzini <pbonzini@redhat.com> 1591805372 -0400

run-coverity-scan: use docker.py

Our trusted docker wrapper allows run-coverity-scan to run with both
docker and podman.

For the "run" phase this is transparent; for the "build" phase however
scripts are replaced with a bind mount (-v).  This is not an issue
because the secret option is meant for secrets stored globally in the
system and bind mounts are a valid substitute for secrets that are known
to whoever builds the container.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>