Fetch cppcheck

Author: martin4861

example/MODULE.bazel

@@ -128,3 +128,22 @@ rust.toolchain(
     edition = "2021",
     versions = ["1.75.0"],
 )
+
+# Download cppcheck premium tar files for different platforms
+http_archive = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+
+http_archive(
+    name = "cppcheck_premium_linux",
+    build_file = "//tools/lint:cppcheck.BUILD",
+    integrity = "sha256-kacV5Qvy8pHqYoejdDCId4yS3VJDaqTqSJ9JgEIfQd0=",
+    strip_prefix = "cppcheckpremium-25.8.4",
+    urls = ["https://files.cppchecksolutions.com/25.8.4/ubuntu-22.04/cppcheckpremium-25.8.4-amd64.tar.gz"],
+)
+
+http_archive(
+    name = "cppcheck_premium_macos",
+    build_file = "//tools/lint:cppcheck.BUILD",
+    integrity = "sha256-bsxXTXw2YPcClRfTXzsLtgDNTYDmHpNapu12la93tAs=",
+    strip_prefix = "cppcheckpremium",
+    urls = ["https://files.cppchecksolutions.com/25.8.4/cppcheckpremium-25.8.4-macos-15.tar.gz"],
+)

example/tools/lint/BUILD.bazel

@@ -11,6 +11,7 @@ load("@npm//:eslint/package_json.bzl", eslint_bin = "bin")
 load("@npm//:stylelint/package_json.bzl", stylelint_bin = "bin")
 load("@rules_java//java:defs.bzl", "java_binary")
 load("@rules_python//python/entry_points:py_console_script_binary.bzl", "py_console_script_binary")
+load("@rules_shell//shell:sh_binary.bzl", "sh_binary")
 
 package(default_visibility = ["//:__subpackages__"])
 
@@ -115,7 +116,32 @@ native_binary(
     out = "clang_tidy",
 )
 
+genrule(
+    name = "cppcheck_wrapper",
+    srcs = ["cppcheck_wrapper.sh.tpl"] + select({
+        "@platforms//os:linux": [
+            "@cppcheck_premium_linux//:cppcheck_binary",
+        ],
+        "@platforms//os:macos": [
+            "@cppcheck_premium_macos//:cppcheck_binary",
+        ],
+    }),
+    outs = ["cppcheck_wrapper.sh"],
+    cmd = select({
+        "@platforms//os:linux": """
+            sed 's|@@CPPCHECK_BINARY@@|$(rlocationpath @cppcheck_premium_linux//:cppcheck_binary)|g' $(location cppcheck_wrapper.sh.tpl) > $@
+        """,
+        "@platforms//os:macos": """
+            sed 's|@@CPPCHECK_BINARY@@|$(rlocationpath @cppcheck_premium_macos//:cppcheck_binary)|g' $(location cppcheck_wrapper.sh.tpl) > $@
+        """,
+    }),
+)
+
 sh_binary(
     name = "cppcheck",
-    srcs = ["cppcheck_wrapper.sh"],
+    srcs = [":cppcheck_wrapper"],
+    data = select({
+        "@platforms//os:linux": ["@cppcheck_premium_linux//:runtime_files"],
+        "@platforms//os:macos": ["@cppcheck_premium_macos//:runtime_files"],
+    }),
 )

example/tools/lint/cppcheck.BUILD

@@ -0,0 +1,14 @@
+# BUILD file for cppcheck premium external repository
+
+package(default_visibility = ["//visibility:public"])
+
+# Main cppcheck binary as a specific target
+filegroup(
+    name = "cppcheck_binary",
+    srcs = ["cppcheck"],
+)
+
+filegroup(
+    name = "runtime_files",
+    srcs = glob(["**"]),
+)

example/tools/lint/cppcheck_wrapper.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+SCRIPT_DIR="$(dirname "$0")"
+CPPCHECK_BINARY="$SCRIPT_DIR/cppcheck.runfiles/@@CPPCHECK_BINARY@@"
+
+"$CPPCHECK_BINARY" \
+    --check-level=exhaustive \
+    --enable=warning,style,performance,portability,information \
+    "$@"