From 9bdaa61dc4a83b28bd16781421394d4f86fefebf Mon Sep 17 00:00:00 2001
From: Matti Paaso <matti.paaso@qt.io>
Date: Tue, 21 Apr 2026 13:04:38 +0300
Subject: [PATCH] Run Axivion analysis only for security critical files

Task-number: QTQAINFRA-7720
Pick-to: 6.11 6.8
Change-Id: Ic3c0ba96421b94e5024ae887e32d51e879305739
Reviewed-by: Toni Saario <toni.saario@qt.io>
---
 .../common/linux/axivion/rule_config.json      | 12 +++++++++---
 .../common/linux/axivion/start_analysis.sh     | 18 ++++++++++++++++++
 2 files changed, 27 insertions(+), 3 deletions(-)

diff --git a/coin/provisioning/common/linux/axivion/rule_config.json b/coin/provisioning/common/linux/axivion/rule_config.json
index 15311584..ff34abdc 100644
--- a/coin/provisioning/common/linux/axivion/rule_config.json
+++ b/coin/provisioning/common/linux/axivion/rule_config.json
@@ -22,6 +22,9 @@
             "_active": true,
             "excludes": [
                 "$(splitpath:EXCLUDE_FILES)"
+            ],
+            "includes": [
+                "$(splitpath:INCLUDE_FILES)"
             ]
         },
         "Frameworks-QtSupport": {
@@ -272,14 +275,17 @@
         "Stylechecks": {
             "excludes": [
                 "$(splitpath:EXCLUDE_FILES)"
+            ],
+            "includes": [
+                "$(splitpath:INCLUDE_FILES)"
             ]
         }
     },
     "_Format": "1.0",
     "_VersionNum": [
         7,
-        10,
-        4,
-        17655
+        11,
+        5,
+        19102
     ]
 }
diff --git a/coin/provisioning/common/linux/axivion/start_analysis.sh b/coin/provisioning/common/linux/axivion/start_analysis.sh
index b5becfa9..30d7bf23 100755
--- a/coin/provisioning/common/linux/axivion/start_analysis.sh
+++ b/coin/provisioning/common/linux/axivion/start_analysis.sh
@@ -10,4 +10,22 @@ export EXCLUDE_FILES="build/*:src/3rdparty/*"
 export MODULE=$TESTED_MODULE_COIN
 export PACKAGE="Add-ons"
 export IRNAME=build/$TESTED_MODULE_COIN.ir
+
+ROOT_DIR=src
+MAGIC="Qt-Security score:critical"
+
+INCLUDE_FILES=""
+
+while IFS= read -r file; do
+    if [ -z "$INCLUDE_FILES" ]; then
+        INCLUDE_FILES="$file"
+    else
+        INCLUDE_FILES="$INCLUDE_FILES:$file"
+    fi
+done <<EOF
+$(grep -rl "$MAGIC" "$ROOT_DIR")
+EOF
+
+export INCLUDE_FILES
+
 axivion_ci "$@"