ci: verify coverity scan script before using it