From 2479ded0b2c581b72d3548a40d077eadc77692b2 Mon Sep 17 00:00:00 2001
From: xinjian <04070628@163.com>
Date: Sat, 11 Oct 2025 10:22:12 +0800
Subject: [PATCH] fix Coverity Scan error : Check Coverity Token

---
 .github/workflows/coverity_scan.yml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/.github/workflows/coverity_scan.yml b/.github/workflows/coverity_scan.yml
index 373504d0..7f8575f0 100644
--- a/.github/workflows/coverity_scan.yml
+++ b/.github/workflows/coverity_scan.yml
@@ -17,14 +17,38 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y curl build-essential cmake pkg-config libsystemd-dev
 
+      - name: Check Coverity Token
+        id: check-token
+        env:
+          COVERITY_TOKEN: ${{ secrets.COVERITY_TOKEN }}
+        run: |
+          if [ -z "${COVERITY_TOKEN}" ]; then
+            echo "COVERITY_TOKEN secret is not set. Skipping Coverity scan."
+            echo "skip=true" >> $GITHUB_OUTPUT
+          else
+            echo "skip=false" >> $GITHUB_OUTPUT
+          fi
+
       - name: Download Coverity Tool
+        if: steps.check-token.outputs.skip == 'false'
         run: |
+          echo "Downloading Coverity tool..."
           curl -s -L --output coverity_tool.tgz "https://scan.coverity.com/download/linux64?token=${{ secrets.COVERITY_TOKEN }}&project=gabime%2Fspdlog"
+          
+          # Verify the downloaded file is a valid tar archive
+          if ! file coverity_tool.tgz | grep -q "gzip compressed"; then
+            echo "Error: Downloaded file is not a valid gzip archive"
+            echo "File content (first 200 bytes):"
+            head -c 200 coverity_tool.tgz
+            exit 1
+          fi
+          
           mkdir coverity_tool
           tar -C coverity_tool --strip-components=1 -xf coverity_tool.tgz
           echo "$PWD/coverity_tool/bin" >> $GITHUB_PATH
 
       - name: Build with Coverity
+        if: steps.check-token.outputs.skip == 'false'
         run: |
           mkdir build && cd build
           cmake .. -DCMAKE_BUILD_TYPE=Release -DCMAKE_CXX_STANDARD=17
@@ -32,6 +56,7 @@ jobs:
           cov-build --dir cov-int make -C build -j4
 
       - name: Submit results to Coverity
+        if: steps.check-token.outputs.skip == 'false'
         run: |
           tar czf cov-int.tgz cov-int
           response=$(curl --silent --show-error --fail \