From 08f5f6b211c5de028e5d1bfb8ea2f98ce4cddbde Mon Sep 17 00:00:00 2001 From: Xavier Delaruelle Date: Sun, 16 Aug 2026 09:07:16 +0200 Subject: [PATCH] Revert "gh: drop Codecov token, upload works without one for fork PRs" This reverts commit 87deb87e66442794908cbfb3212de6f0c5e7a2f8. Signed-off-by: Xavier Delaruelle --- .github/workflows/linux_tests.yaml | 30 ++++++++++++------------------ .github/workflows/macos_tests.yaml | 5 ++--- 2 files changed, 14 insertions(+), 21 deletions(-) diff --git a/.github/workflows/linux_tests.yaml b/.github/workflows/linux_tests.yaml index adf0625c9..522849ee2 100644 --- a/.github/workflows/linux_tests.yaml +++ b/.github/workflows/linux_tests.yaml @@ -67,10 +67,9 @@ jobs: - name: Uninstall Modules run: | make uninstall - # no token needed: public repo uses Codecov's tokenless upload via - # GitHub OIDC, which also works for pull requests coming from forks - # (base repo secrets are never exposed to fork-triggered PR runs) - uses: codecov/codecov-action@v7 + with: + token: ${{ secrets.CODECOV_TOKEN }} - uses: actions/upload-artifact@v7 if: failure() with: @@ -155,10 +154,9 @@ jobs: - name: Uninstall Modules run: | make uninstall - # no token needed: public repo uses Codecov's tokenless upload via - # GitHub OIDC, which also works for pull requests coming from forks - # (base repo secrets are never exposed to fork-triggered PR runs) - uses: codecov/codecov-action@v7 + with: + token: ${{ secrets.CODECOV_TOKEN }} - uses: actions/upload-artifact@v7 if: failure() with: @@ -239,10 +237,9 @@ jobs: - name: Uninstall Modules run: | make uninstall - # no token needed: public repo uses Codecov's tokenless upload via - # GitHub OIDC, which also works for pull requests coming from forks - # (base repo secrets are never exposed to fork-triggered PR runs) - uses: codecov/codecov-action@v7 + with: + token: ${{ secrets.CODECOV_TOKEN }} - uses: actions/upload-artifact@v7 if: failure() with: @@ -308,10 +305,9 @@ jobs: - name: Uninstall Modules run: | make uninstall - # no token needed: public repo uses Codecov's tokenless upload via - # GitHub OIDC, which also works for pull requests coming from forks - # (base repo secrets are never exposed to fork-triggered PR runs) - uses: codecov/codecov-action@v7 + with: + token: ${{ secrets.CODECOV_TOKEN }} - uses: actions/upload-artifact@v7 if: failure() with: @@ -379,10 +375,9 @@ jobs: - name: Uninstall Modules run: | make uninstall - # no token needed: public repo uses Codecov's tokenless upload via - # GitHub OIDC, which also works for pull requests coming from forks - # (base repo secrets are never exposed to fork-triggered PR runs) - uses: codecov/codecov-action@v7 + with: + token: ${{ secrets.CODECOV_TOKEN }} - uses: actions/upload-artifact@v7 if: failure() with: @@ -525,10 +520,9 @@ jobs: - name: Uninstall Modules run: | make uninstall - # no token needed: public repo uses Codecov's tokenless upload via - # GitHub OIDC, which also works for pull requests coming from forks - # (base repo secrets are never exposed to fork-triggered PR runs) - uses: codecov/codecov-action@v7 + with: + token: ${{ secrets.CODECOV_TOKEN }} - uses: actions/upload-artifact@v7 if: failure() with: diff --git a/.github/workflows/macos_tests.yaml b/.github/workflows/macos_tests.yaml index 02660c30c..a98615f57 100644 --- a/.github/workflows/macos_tests.yaml +++ b/.github/workflows/macos_tests.yaml @@ -62,10 +62,9 @@ jobs: - name: Uninstall Modules run: | make uninstall - # no token needed: public repo uses Codecov's tokenless upload via - # GitHub OIDC, which also works for pull requests coming from forks - # (base repo secrets are never exposed to fork-triggered PR runs) - uses: codecov/codecov-action@v7 + with: + token: ${{ secrets.CODECOV_TOKEN }} - uses: actions/upload-artifact@v7 if: failure() with: