Yicong-Huang opened a new issue, #4665:
URL: https://github.com/apache/texera/issues/4665
### Task Summary
Wire `CODECOV_TOKEN` to the four Codecov upload steps in
`.github/workflows/build.yml` so coverage reports from `push` events on
protected branches (`main`, `release/**`) actually land on Codecov.
**Root cause** — Codecov's tokenless upload only works for fork PRs. For
push events on Codecov-protected default branches it rejects the upload with:
> `Upload queued for processing failed: {"message":"Token required because
branch is protected"}`
This is silent today because `fail_ci_if_error: false`. As a result Codecov
has zero reports on `apache:main`
(https://codecov.io/api/v2/github/apache/repos/texera/branches/main returns
404) and every branch listed there is a fork PR. The same root cause is why the
coverage badge would show "unknown" if added today.
**Plan** — Add `token: ${{ secrets.CODECOV_TOKEN }}` to each of the four
`codecov/codecov-action` uses (frontend, scala, python, agent-service). The
`CODECOV_TOKEN` secret has already been added at the repo level.
Out of scope for this task: flipping `fail_ci_if_error` to `true`, opting
into Codecov OIDC, fixing Codecov's stale "default branch = master" setting,
adding a coverage badge to the README. Those should be follow-ups once `main`
starts producing reports.
### Task Type
- [x] DevOps / Deployment / CI
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
