kyverno/.github/workflows/codecov.yaml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

name: Codecov

permissions: {}

on:
  pull_request:
    branches:
    - 'main'
    - 'release*'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  unit-tests:
    runs-on: ubuntu-latest
    steps:
    - name: Checkout
      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
    - name: Setup caches
      uses: ./.github/actions/setup-caches
      timeout-minutes: 5
      continue-on-error: true
      with:
        build-cache-key: codecov
    - name: Setup build env
      uses: ./.github/actions/setup-build-env
      timeout-minutes: 10
      with:
        free-disk-space: false
    - name: Generate Code Coverage Report
      run: make code-cov-report
    - name: Upload coverage
      uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
      with:
        name: coverage.out
        path: coverage.out
        retention-days: 1
        if-no-files-found: error

  upload-to-codecov:
    needs:
    - unit-tests
    runs-on: ubuntu-latest
    steps:
    - name: Checkout
      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
    - name: Download coverage
      uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
      with:
        name: coverage.out
    - name: Upload Report to Codecov
      uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
      with:
        files: ./coverage.out
        fail_ci_if_error: true
        verbose: true
      env:
        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}