Skip to content

ci: use OIDC for codecov-action#564

Merged
njzjz merged 2 commits intodeepmodeling:masterfrom
njzjz-bot:codecov-oidc
Mar 29, 2026
Merged

ci: use OIDC for codecov-action#564
njzjz merged 2 commits intodeepmodeling:masterfrom
njzjz-bot:codecov-oidc

Conversation

@njzjz-bot
Copy link
Copy Markdown
Contributor

Replace token-based authentication with OIDC (OpenID Connect) for codecov-action.
This is more secure and eliminates the need to manage upload tokens.

Changes:

  • Add use_oidc: true to codecov-action configuration
  • Add id-token: write permission at workflow level
  • Remove token parameter from codecov-action (ignored when using OIDC)

This improves security and follows codecov-action best practices.

Generated by the task: njzjz-bot/njzjz-bot#25.

Replace token-based authentication with OIDC (OpenID Connect) for codecov-action.
This is more secure and eliminates the need to manage upload tokens.

Changes:
- Add use_oidc: true to codecov-action configuration
- Add id-token: write permission at workflow level
- Remove token parameter from codecov-action (ignored when using OIDC)

This improves security and follows codecov-action best practices.

Generated by the task: njzjz-bot/njzjz-bot#25.
@dosubot dosubot Bot added the size:M This PR changes 30-99 lines, ignoring generated files. label Jan 24, 2026
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Jan 24, 2026

Warning

Rate limit exceeded

@njzjz-bot has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 18 minutes and 3 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 18 minutes and 3 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: d5c1c4ce-d8e3-4b8f-b466-3926556fcd46

📥 Commits

Reviewing files that changed from the base of the PR and between 9a76542 and fc0bf88.

📒 Files selected for processing (2)
  • .github/workflows/test-bohrium.yml
  • .github/workflows/test.yml
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@dosubot dosubot Bot added the github_actions Pull requests that update GitHub Actions code label Jan 24, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented Jan 24, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 48.33%. Comparing base (9a76542) to head (fc0bf88).
⚠️ Report is 21 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master     #564      +/-   ##
==========================================
+ Coverage   47.64%   48.33%   +0.68%     
==========================================
  Files          39       40       +1     
  Lines        3912     3958      +46     
==========================================
+ Hits         1864     1913      +49     
+ Misses       2048     2045       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Keep the OIDC migration focused by removing unrelated YAML reformatting and restoring explicit contents: read alongside id-token: write so checkout keeps working.

Authored by OpenClaw (model: gpt-5.4)
@dosubot dosubot Bot added size:S This PR changes 10-29 lines, ignoring generated files. and removed size:M This PR changes 30-99 lines, ignoring generated files. labels Mar 29, 2026
@dosubot dosubot Bot added the lgtm This PR has been approved by a maintainer label Mar 29, 2026
@njzjz njzjz enabled auto-merge (squash) March 29, 2026 15:09
@njzjz njzjz merged commit 7140848 into deepmodeling:master Mar 29, 2026
31 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code lgtm This PR has been approved by a maintainer size:S This PR changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants