Add manual job to run scan-build analysis

.gitlab-ci.yml

@@ -88,8 +88,8 @@ stages:
     - test -w "${CCACHE_DIR}" && export PATH="/usr/lib/ccache:${PATH}"
     - ./autogen.sh
   script:
-    - ./configure --enable-developer --with-libtool --disable-static --with-atf=/usr/local --with-libidn2
-    - make -j${PARALLEL_JOBS_BUILD:-1} -k all V=1
+    - ${SCAN_BUILD} ./configure --enable-developer --with-libtool --disable-static --with-atf=/usr/local --with-libidn2
+    - ${SCAN_BUILD} make -j${PARALLEL_JOBS_BUILD:-1} -k all V=1
   artifacts:
     expire_in: '1 hour'
     untracked: true
@@ -162,6 +162,28 @@ precheck:debian:sid:amd64:
 #  <<: *ubuntu_xenial_i386_image
 #  <<: *build_job
 
+build:scan-build:debian:stretch:amd64:
+  stage: build
+  variables:
+    CC: clang
+    CFLAGS: "-Wall -Wextra -Wenum-conversion -O2 -g"
+  before_script:
+    - ./autogen.sh
+    - dpkg -L clang
+    - dpkg -L clang-tools
+    - dpkg -L clang-7
+    - dpkg -L clang-tools-7
+  script:
+    - scan-build-7 -o $CI_PROJECT_DIR/scan-build.results -j${PARALLEL_JOBS_BUILD:-1} -stats ./configure --enable-developer --with-libtool --disable-static --with-atf=/usr/local --with-libidn2
+    - scan-build-7 -o $CI_PROJECT_DIR/scan-build.results -j${PARALLEL_JOBS_BUILD:-1} -stats make -j${PARALLEL_JOBS_BUILD:-1} -k all V=1
+  <<: *debian_stretch_amd64_image
+  <<: *build_job
+  when: manual
+  artifacts:
+    expire_in: '1 week'
+    paths:
+    - scan-build.results
+
 build:clang:debian:sid:amd64:
   variables:
     CC: clang