This is an automated email from the ASF dual-hosted git repository.
hainenber pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git
The following commit(s) were added to refs/heads/master by this push:
new 2b6c745444b fix(ci): use OIDC auth token for successful Codecov upload
(#38218)
2b6c745444b is described below
commit 2b6c745444b08ba7acc75538c9b12b81d52a241f
Author: Đỗ Trọng Hải <[email protected]>
AuthorDate: Thu Feb 26 10:34:24 2026 +0700
fix(ci): use OIDC auth token for successful Codecov upload (#38218)
---
.github/workflows/superset-frontend.yml | 23 +++++++++++++++++++----
1 file changed, 19 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/superset-frontend.yml
b/.github/workflows/superset-frontend.yml
index f7953ad9fa8..4390810b5ea 100644
--- a/.github/workflows/superset-frontend.yml
+++ b/.github/workflows/superset-frontend.yml
@@ -87,7 +87,7 @@ jobs:
-v ${{ github.workspace
}}/superset-frontend/coverage:/app/superset-frontend/coverage \
--rm $TAG \
bash -c \
- "npm run test -- --coverage --shard=${{ matrix.shard }}/8
--coverageReporters=json-summary"
+ "npm run test -- --coverage --shard=${{ matrix.shard }}/8
--coverageReporters=json"
- name: Upload Coverage Artifact
uses: actions/upload-artifact@v6
@@ -99,15 +99,29 @@ jobs:
needs: [sharded-jest-tests]
if: needs.frontend-build.outputs.should-run == 'true'
runs-on: ubuntu-24.04
+ permissions:
+ id-token: write
steps:
+ - name: Checkout Code
+ uses: actions/checkout@v6
+ with:
+ persist-credentials: false
+ fetch-depth: 0
+ ref: ${{ github.event_name == 'pull_request' &&
github.event.pull_request.head.sha || github.sha }}
+
- name: Download Coverage Artifacts
uses: actions/download-artifact@v7
with:
pattern: coverage-artifacts-*
path: coverage/
- - name: Show Files
- run: find coverage/
+ - name: Reorganize test result reports
+ run: |
+ find coverage/
+ for i in {1..8}; do
+ mv coverage/coverage-artifacts-${i}/coverage-final.json
coverage/coverage-shard-${i}.json
+ done
+ shell: bash
- name: Merge Code Coverage
run: npx nyc merge coverage/ merged-output/coverage-summary.json
@@ -116,8 +130,9 @@ jobs:
uses: codecov/codecov-action@v5
with:
flags: javascript
- token: ${{ secrets.CODECOV_TOKEN }}
+ use_oidc: true
verbose: true
+ disable_search: true
files: merged-output/coverage-summary.json
slug: apache/superset
