From d1523554619e6382055753dd15414127b5bf0e38 Mon Sep 17 00:00:00 2001
From: Justin Stephenson <jstephen@redhat.com>
Date: Thu, 14 Nov 2024 14:53:06 -0500
Subject: [PATCH] ci: Add workflow for 'coverity' label in PRs

---
 .github/workflows/coverity.yml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 28b6e7b7f91..c28e761d953 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -1,15 +1,26 @@
 name: Coverity scan
 on:
-  # run once daily at 00:30 UTC due to
+  # coverity_daily job runs once daily at 00:30 UTC due to
   # https://scan.coverity.com/faq#frequency
   schedule:
     - cron: "30 0 * * *"
+  # coverity_label job triggers if PR has 'coverity' label set.
+  # This job likely cannot be re-run on the same day or we will
+  # hit the build submission limit (see above link)
+  pull_request_target:
+    branches:
+      - master
+    types:
+      - labeled
   workflow_dispatch:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 jobs:
   coverity:
+    if: |
+      ${{ github.event_name == 'schedule' }} ||
+      ${{ github.event.label.name == 'coverity' && github.event_name == 'pull_request' }}
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository