Fetch cppcheck

Author: martin4861

example/.aspect/cli/config.yaml

@@ -10,5 +10,6 @@ lint:
     - //tools/lint:linters.bzl%vale
     - //tools/lint:linters.bzl%checkstyle
     - //tools/lint:linters.bzl%clang_tidy
+    - //tools/lint:linters.bzl%cppcheck
     - //tools/lint:linters.bzl%spotbugs
     - //tools/lint:linters.bzl%keep_sorted

example/MODULE.bazel

@@ -173,3 +173,22 @@ ruby.bundle_fetch(
 use_repo(ruby, "bundle", "ruby", "ruby_toolchains")
 
 register_toolchains("@ruby_toolchains//:all")
+
+# Download cppcheck premium tar files for different platforms
+http_archive = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+
+http_archive(
+    name = "cppcheck_linux",
+    build_file = "//tools/lint:cppcheck.BUILD",
+    integrity = "sha256-IqQ3Iofw6LoHh4YcdbN0m3tjg6utCiey7nGaOaPMv/I=",
+    strip_prefix = "cppcheckpremium-25.8.3",
+    urls = ["https://files.cppchecksolutions.com/25.8.3/ubuntu-22.04/cppcheckpremium-25.8.3-amd64.tar.gz"],
+)
+
+http_archive(
+    name = "cppcheck_macos",
+    build_file = "//tools/lint:cppcheck.BUILD",
+    integrity = "sha256-PEtm/DxKNZNJJuZE+56AZ80R22sZjZoziekAmR7FhNk=",
+    strip_prefix = "cppcheckpremium",
+    urls = ["https://files.cppchecksolutions.com/25.8.3/cppcheckpremium-25.8.3-macos-15.tar.gz"],
+)

example/WORKSPACE.bazel

@@ -423,3 +423,19 @@ multitool(
         "@aspect_rules_lint//lint:multitool.lock.json",
     ],
 )
+
+http_archive(
+    name = "cppcheck_linux",
+    build_file = "//tools/lint:cppcheck.BUILD",
+    integrity = "sha256-IqQ3Iofw6LoHh4YcdbN0m3tjg6utCiey7nGaOaPMv/I=",
+    strip_prefix = "cppcheckpremium-25.8.3",
+    urls = ["https://files.cppchecksolutions.com/25.8.3/ubuntu-22.04/cppcheckpremium-25.8.3-amd64.tar.gz"],
+)
+
+http_archive(
+    name = "cppcheck_macos",
+    build_file = "//tools/lint:cppcheck.BUILD",
+    integrity = "sha256-PEtm/DxKNZNJJuZE+56AZ80R22sZjZoziekAmR7FhNk=",
+    strip_prefix = "cppcheckpremium",
+    urls = ["https://files.cppchecksolutions.com/25.8.3/cppcheckpremium-25.8.3-macos-15.tar.gz"],
+)

example/tools/lint/BUILD.bazel

@@ -11,6 +11,7 @@ load("@npm//:eslint/package_json.bzl", eslint_bin = "bin")
 load("@npm//:stylelint/package_json.bzl", stylelint_bin = "bin")
 load("@rules_java//java:defs.bzl", "java_binary")
 load("@rules_python//python/entry_points:py_console_script_binary.bzl", "py_console_script_binary")
+load("@rules_shell//shell:sh_binary.bzl", "sh_binary")
 
 package(default_visibility = ["//:__subpackages__"])
 
@@ -120,7 +121,19 @@ alias(
     actual = "@bundle//bin:rubocop",
 )
 
+# cppcheck
+genrule(
+    name = "cppcheck_wrapper",
+    srcs = ["cppcheck_wrapper.sh.tpl"],
+    outs = ["cppcheck_wrapper.sh"],
+    cmd = "cp $(location cppcheck_wrapper.sh.tpl) $@",
+)
+
 sh_binary(
     name = "cppcheck",
-    srcs = ["cppcheck_wrapper.sh"],
+    srcs = [":cppcheck_wrapper"],
+    data = select({
+        "@platforms//os:linux": ["@cppcheck_linux//:files"],
+        "@platforms//os:macos": ["@cppcheck_macos//:files"],
+    }),
 )

example/tools/lint/cppcheck.BUILD

@@ -0,0 +1,11 @@
+# BUILD file for cppcheck premium external repository
+
+package(default_visibility = ["//visibility:public"])
+
+filegroup(
+    name = "files",
+    srcs = glob(
+        ["**"],
+        exclude = ["cppcheck.cfg"],
+    ),
+)

example/tools/lint/cppcheck_wrapper.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+set -o errexit -o nounset -o pipefail
+
+SCRIPT_DIR="$(dirname "$0")"
+RUNFILES_DIR="$SCRIPT_DIR/cppcheck.runfiles"
+
+# Find the cppcheck binary in the runfiles directory
+# It will be under one of the cppcheck_premium_* directories
+# Note: cppcheck may be a symlink, so don't use -type f
+CPPCHECK_BINARY=$(find "$RUNFILES_DIR" -name "cppcheck" \( -type f -o -type l \) 2>/dev/null | head -n1)
+
+if [[ -z "$CPPCHECK_BINARY" ]]; then
+    echo "Error: Could not find cppcheck binary in runfiles" >&2
+    exit 1
+fi
+
+# cppcheck does not support config files.
+# Instead options like --check-level can be added here:
+"$CPPCHECK_BINARY" \
+    --check-level=exhaustive \
+    --enable=warning,style,performance,portability,information \
+    "$@"