Function run_static_analysis_against_compile_db

ci/ci-cppcheck.py:144–182

Run clang-tidy against a compile_commands.json via ``clang-tool-chain-tidy``. Routes entirely through the ``clang-tool-chain`` wrapper (lazily validates and fetches its bundled toolchain on first use), so there is no ``apt-get install`` / system-package dependency. Replaces the legacy

(compile_db: Path, project_root: Path)

def run_static_analysis_against_compile_db(compile_db: Path, project_root: Path) -> int:
    """Run clang-tidy against a compile_commands.json via ``clang-tool-chain-tidy``.

    Routes entirely through the ``clang-tool-chain`` wrapper (lazily validates
    and fetches its bundled toolchain on first use), so there is no
    ``apt-get install`` / system-package dependency. Replaces the legacy
    ``pio check`` pathway, which fails during CMake configure on
    fbuild-compiled boards because PIO-side metadata (partition CSVs etc.)
    isn't populated — see FastLED#2302 / #2303.

    Check selection is governed by the repo-root ``.clang-tidy`` file, which
    already enables the cppcheck-equivalent families (``bugprone-*``,
    ``clang-analyzer-*``, ``performance-*``, selected ``modernize-*`` /
    ``readability-*``). No inline ``--checks`` override — the file is the
    single source of truth.
    """
    files = _load_src_files_from_compile_db(compile_db, project_root)
    if not files:
        print(
            f"No src/ translation units found in {compile_db} — nothing to "
            f"analyze. (Compile DB may cover only framework code for this "
            f"board.)"
        )
        return 0

    print(
        f"Running clang-tool-chain-tidy against {len(files)} src/ files using "
        f"compile DB: {compile_db}"
    )
    cmd = [
        "uv",
        "run",
        "clang-tool-chain-tidy",
        "-p",
        str(compile_db.parent),
        *files,
    ]
    cp = subprocess.run(cmd)
    return cp.returncode


def main() -> int: