From 0fd5f56332a2a1af4e31fb790cb214ce6de56fce Mon Sep 17 00:00:00 2001 From: Billy Zha Date: Sun, 7 Apr 2024 08:16:15 +0000 Subject: [PATCH 1/2] bump(ci): update codecov gha to v4 Signed-off-by: Billy Zha --- .github/workflows/build.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index d4d73f4b7..bc83a7acd 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -53,6 +53,7 @@ jobs: - name: Check Version run: bin/linux/amd64/oras version - name: Upload coverage to codecov.io - uses: codecov/codecov-action@v3 + uses: codecov/codecov-action@v4 with: fail_ci_if_error: true + use_oidc: true From 6c573ea1f1e58ddac93a655795de21f592aa6c23 Mon Sep 17 00:00:00 2001 From: Billy Zha Date: Sun, 7 Apr 2024 08:22:35 +0000 Subject: [PATCH 2/2] add OIDC token access Signed-off-by: Billy Zha --- .github/workflows/build.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index bc83a7acd..eca7b76e4 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -25,6 +25,8 @@ on: jobs: build: runs-on: ubuntu-latest + permissions: + id-token: write # Required for codecov.io strategy: matrix: go-version: ['1.22']