Commit8b923b5

committed

expose the token, this is intentional.

1 parent9f46e33 commit8b923b5Copy full SHA for 8b923b5

File tree

+15

-1

lines changed

+15

-1

lines changed

Lines changed: 15 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -96,11 +96,25 @@ jobs:`
`96`	`96`	`GO_MODULE_PATH:${{ matrix.module.path }}`
`97`	`97`	`run:task go:test`
`98`	`98`
	`99`	`+# A token is used to avoid intermittent spurious job failures caused by rate limiting.`
	`100`	`+ -name:Set up Codecov upload token`
	`101`	`+run:\|`
	`102`	`+ if [[ "${{ github.repository }}" == "arduino/arduino-create-agent" ]]; then`
	`103`	`+ # In order to avoid uploads of data from forks, only use the token for runs in the arduino/arduino-create-agent repo.`
	`104`	`+ # Token is intentionally exposed.`
	`105`	`+ # See: https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954`
	`106`	`+ CODECOV_TOKEN=fe64847a-368e-4f95-9212-1f7a6835043f`
	`107`	`+ else`
	`108`	+ # codecov/codecov-action does unauthenticated upload if empty string is passed via the `token` input.
	`109`	`+ CODECOV_TOKEN=""`
	`110`	`+ fi`
	`111`	`+ echo "CODECOV_TOKEN=$CODECOV_TOKEN" >> "$GITHUB_ENV"`
	`112`	`+`
`99`	`113`	`-name:Send unit tests coverage to Codecov`
`100`	`114`	`if:runner.os == 'Linux'`
`101`	`115`	`uses:codecov/codecov-action@v4`
`102`	`116`	`with:`
`103`		`-token:${{secrets.CODECOV_TOKEN }}`
	`117`	`+token:${{env.CODECOV_TOKEN }}`
`104`	`118`	`files:${{ matrix.module.path }}coverage_unit.txt`
`105`	`119`	`flags:${{ matrix.module.codecov-flags }}`
`106`	`120`	`fail_ci_if_error:${{ github.repository == 'arduino/arduino-create-agent' }}`

Comments

(0)