kyverno/.github/workflows/codecov.yaml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

name: Codecov

permissions: {}

on:
  pull_request:
    branches:
    - 'main'
    - 'release*'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  unit-tests:
    runs-on: ubuntu-latest
    steps:
    - name: Checkout
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
    - name: Setup caches
      uses: ./.github/actions/setup-caches
      timeout-minutes: 5
      continue-on-error: true
      with:
        build-cache-key: codecov
    - name: Setup build env
      uses: ./.github/actions/setup-build-env
      timeout-minutes: 10
      with:
        free-disk-space: false
    - name: Generate Code Coverage Report
      run: make code-cov-report
    - name: Upload coverage
      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
      with:
        name: coverage.out
        path: coverage.out
        retention-days: 1
        if-no-files-found: error

  upload-to-codecov:
    needs:
    - unit-tests
    runs-on: ubuntu-latest
    steps:
    - name: Checkout
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
    - name: Download coverage
      uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
      with:
        name: coverage.out
    - name: Upload Report to Codecov
      uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1
      with:
        files: ./coverage.out
        fail_ci_if_error: true
        verbose: true
      env:
        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}