[clang-tidy] First stab at making clang-tidy bot work

Change-Id: Ia3514b93994b8c39a8f7424a2ae30a0c7d57c44f
Bug: 432056719
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/79227
Reviewed-by: David Benjamin <davidben@google.com>
Auto-Submit: Julia Hansbrough <flowerhack@google.com>
diff --git a/infra/config/generated/commit-queue.cfg b/infra/config/generated/commit-queue.cfg
index fac22b6..65e718b 100644
--- a/infra/config/generated/commit-queue.cfg
+++ b/infra/config/generated/commit-queue.cfg
@@ -245,6 +245,37 @@
       builders {
         name: "boringssl/try/win_arm64_msvc_compile"
       }
+      builders {
+        name: "chromium/try/tricium-clang-tidy"
+        disable_reuse: true
+        experiment_percentage: 100
+        location_filters {
+          gerrit_host_regexp: ".*"
+          gerrit_project_regexp: ".*"
+          gerrit_ref_regexp: ".*"
+          path_regexp: ".+\\.h"
+        }
+        location_filters {
+          gerrit_host_regexp: ".*"
+          gerrit_project_regexp: ".*"
+          gerrit_ref_regexp: ".*"
+          path_regexp: ".+\\.c"
+        }
+        location_filters {
+          gerrit_host_regexp: ".*"
+          gerrit_project_regexp: ".*"
+          gerrit_ref_regexp: ".*"
+          path_regexp: ".+\\.cc"
+        }
+        location_filters {
+          gerrit_host_regexp: ".*"
+          gerrit_project_regexp: ".*"
+          gerrit_ref_regexp: ".*"
+          path_regexp: ".+\\.cpp"
+        }
+        owner_whitelist_group: "project-boringssl-tryjob-access"
+        mode_allowlist: "NEW_PATCHSET_RUN"
+      }
       retry_config {
         single_quota: 1
         global_quota: 2
diff --git a/infra/config/generated/project.cfg b/infra/config/generated/project.cfg
index 5d42564..c7b762a 100644
--- a/infra/config/generated/project.cfg
+++ b/infra/config/generated/project.cfg
@@ -7,7 +7,7 @@
 name: "boringssl"
 access: "group:all"
 lucicfg {
-  version: "1.44.1"
+  version: "1.45.3"
   package_dir: ".."
   config_dir: "generated"
   entry_point: "main.star"
diff --git a/infra/config/main.star b/infra/config/main.star
index e0e2020..07c3019 100755
--- a/infra/config/main.star
+++ b/infra/config/main.star
@@ -190,6 +190,21 @@
         includable_only = not cq_enabled,
     )
 
+luci.cq_tryjob_verifier(
+    cq_group = "main-cq",
+    builder = "chromium:try/tricium-clang-tidy",
+    owner_whitelist = ["project-boringssl-tryjob-access"],
+    experiment_percentage = 100,
+    disable_reuse = True,
+    mode_allowlist = [cq.MODE_NEW_PATCHSET_RUN],
+    location_filters = [
+        cq.location_filter(path_regexp = r".+\.h"),
+        cq.location_filter(path_regexp = r".+\.c"),
+        cq.location_filter(path_regexp = r".+\.cc"),
+        cq.location_filter(path_regexp = r".+\.cpp"),
+    ],
+)
+
 def both_builders(
         name,
         host,