Run Axivion analysis only for security critical files

Task-number: QTQAINFRA-7720
Pick-to: 6.11 6.8
Change-Id: Ic3c0ba96421b94e5024ae887e32d51e879305739
Reviewed-by: Toni Saario <[email protected]>

coin/provisioning/common/linux/axivion/rule_config.json

@@ -22,6 +22,9 @@
             "_active": true,
             "excludes": [
                 "$(splitpath:EXCLUDE_FILES)"
+            ],
+            "includes": [
+                "$(splitpath:INCLUDE_FILES)"
             ]
         },
         "Frameworks-QtSupport": {
@@ -272,14 +275,17 @@
         "Stylechecks": {
             "excludes": [
                 "$(splitpath:EXCLUDE_FILES)"
+            ],
+            "includes": [
+                "$(splitpath:INCLUDE_FILES)"
             ]
         }
     },
     "_Format": "1.0",
     "_VersionNum": [
         7,
-        10,
-        4,
-        17655
+        11,
+        5,
+        19102
     ]
 }

coin/provisioning/common/linux/axivion/start_analysis.sh

@@ -10,4 +10,22 @@ export EXCLUDE_FILES="build/*:src/3rdparty/*"
 export MODULE=$TESTED_MODULE_COIN
 export PACKAGE="Add-ons"
 export IRNAME=build/$TESTED_MODULE_COIN.ir
+
+ROOT_DIR=src
+MAGIC="Qt-Security score:critical"
+
+INCLUDE_FILES=""
+
+while IFS= read -r file; do
+    if [ -z "$INCLUDE_FILES" ]; then
+        INCLUDE_FILES="$file"
+    else
+        INCLUDE_FILES="$INCLUDE_FILES:$file"
+    fi
+done <<EOF
+$(grep -rl "$MAGIC" "$ROOT_DIR")
+EOF
+
+export INCLUDE_FILES
+
 axivion_ci "$@"