ci: improve CI workflows with test results and simplified triggers#7
Merged
ci: improve CI workflows with test results and simplified triggers#7
Conversation
- Add Codecov test results upload to both test.yaml and pull_request.yaml - Add --junitxml=pytest.xml flag to generate JUnit XML for test results - Restore check-pr-title job in pull_request workflow - Add types specification (opened, edited, synchronize) to pull_request trigger - Remove push trigger for renovate/** branches (use pull_request only) - Remove redundant shell: bash specifications
aquemy
force-pushed
the
ci/improve-ci-workflows
branch
from
412450b to
4b49343
Compare
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Improves CI workflows by adding Codecov test results tracking and simplifying the PR validation workflow.
Changes
1. Add Codecov Test Results Upload
--junitxml=pytest.xml)codecov/test-results-action@v12. Simplify PR Workflow Triggers
push:trigger (no more runs on renovate branches)pull_request_target:trigger (security improvement)if:conditions from jobspull_request3. Update Dependencies
uv.lockfor Python 3.13+ requirementtyping-extensionsdependency for older Python versionsSecurity Analysis
✅ More secure: Eliminated
pull_request_targetwhich has write permissions✅ No command injection risk: PR title validation uses pinned action with no shell execution
✅ Principle of least privilege: Jobs only have
pull-requests: readpermissionTesting
Type of Change