-
Notifications
You must be signed in to change notification settings - Fork 39
fix: add test #3980
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
fix: add test #3980
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -142,6 +142,72 @@ jobs: | |
| uses: codecov/gha-workflows/.github/workflows/codecov-startup.yml@v1.2.14 | ||
| secrets: inherit | ||
|
|
||
| codecov-startup-test: | ||
| name: Codecov Startup - Test | ||
| needs: install | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| fetch-depth: 2 | ||
| submodules: 'recursive' | ||
| - name: Install CLI | ||
| if: ${{ !github.event.pull_request.head.repo.fork && github.repository_owner == 'codecov' }} | ||
| run: | | ||
| make test_env.install_cli | ||
| - name: Debug CODECOV_STAGING_URL network | ||
| run: | | ||
| URL='${{ secrets.CODECOV_STAGING_URL }}' | ||
| HOST="$(printf '%s' "$URL" | sed -E 's|^https?://||; s|[/:].*$||')" | ||
| echo "host = $HOST" | ||
|
|
||
| echo "=== getent (libc resolver) ===" | ||
| getent hosts "$HOST" || echo "getent: NXDOMAIN" | ||
|
|
||
| echo "=== dig system resolver ===" | ||
| dig +short "$HOST" || true | ||
|
|
||
| echo "=== dig @8.8.8.8 ===" | ||
| dig +short @8.8.8.8 "$HOST" || true | ||
|
|
||
| echo "=== TCP/TLS handshake ===" | ||
| timeout 5 openssl s_client -servername "$HOST" -connect "$HOST:443" </dev/null 2>&1 \ | ||
| | grep -E 'CONNECTED|subject=|issuer=|Verify return|errno' | head | ||
|
|
||
| echo "=== HTTPS GET / ===" | ||
| curl -sS -o /dev/null \ | ||
| -w "HTTP=%{http_code} ip=%{remote_ip} dns=%{time_namelookup}s conn=%{time_connect}s total=%{time_total}s\n" \ | ||
| --max-time 10 "$URL/" || echo "curl exit=$?" | ||
|
|
||
| echo "=== HTTPS POST /upload/... ===" | ||
| curl -sS -o /dev/null \ | ||
| -w "HTTP=%{http_code} ip=%{remote_ip} dns=%{time_namelookup}s conn=%{time_connect}s total=%{time_total}s\n" \ | ||
| --max-time 10 -X POST "$URL/upload/github/codecov::::gazebo/commits" \ | ||
| -H 'Authorization: token abc' || echo "curl exit=$?" | ||
| - name: Run Startup | ||
| if: ${{ !github.event.pull_request.head.repo.fork && github.repository_owner == 'codecov' }} | ||
| env: | ||
| CODECOV_TOKEN: ${{ secrets.CODECOV_ORG_TOKEN }} | ||
| run: | | ||
| codecovcli -u ${{ secrets.CODECOV_URL }} create-commit --fail-on-error | ||
| codecovcli -u ${{ secrets.CODECOV_URL }} create-report --fail-on-error | ||
| - name: Run Startup Staging | ||
| if: ${{ !github.event.pull_request.head.repo.fork && github.repository_owner == 'codecov' }} | ||
| run: | | ||
| codecovcli -v -u ${{ secrets.CODECOV_STAGING_URL }} create-commit -t ${{ secrets.CODECOV_ORG_TOKEN_STAGING }} | ||
| codecovcli -v -u ${{ secrets.CODECOV_STAGING_URL }} create-report -t ${{ secrets.CODECOV_ORG_TOKEN_STAGING }} | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Staging step missing
|
||
| - name: Run Startup QA | ||
| if: ${{ !github.event.pull_request.head.repo.fork && github.repository_owner == 'codecov' }} | ||
| run: | | ||
| codecovcli -u ${{ secrets.CODECOV_QA_URL }} create-commit -t ${{ secrets.CODECOV_QA_TOKEN }} --fail-on-error | ||
| codecovcli -u ${{ secrets.CODECOV_QA_URL }} create-report -t ${{ secrets.CODECOV_QA_TOKEN }} --fail-on-error | ||
| - name: Run Startup Public QA | ||
| if: ${{ !github.event.pull_request.head.repo.fork && github.repository_owner == 'codecov' }} | ||
| run: | | ||
| codecovcli -u ${{ secrets.CODECOV_PUBLIC_QA_URL }} create-commit -t ${{ secrets.CODECOV_PUBLIC_QA_TOKEN }} --fail-on-error | ||
| codecovcli -u ${{ secrets.CODECOV_PUBLIC_QA_URL }} create-report -t ${{ secrets.CODECOV_PUBLIC_QA_TOKEN }} --fail-on-error | ||
|
|
||
| runner-indexes-vitest: | ||
| runs-on: ubuntu-latest | ||
| name: Generate runner indexes Vitest | ||
|
|
||


There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Debug network diagnostics step appears accidentally committed
Medium Severity
The "Debug CODECOV_STAGING_URL network" step looks like temporary debugging infrastructure (DNS lookups, TLS handshake checks, curl diagnostics) that was used to troubleshoot a staging connectivity issue. It also lacks the
ifguard present on all other steps, meaning it runs unconditionally — including on fork PRs where the secret is empty. This step exposes the derived staging hostname in public CI logs since GitHub Actions only auto-masks the original secret value, not substrings derived from it.Reviewed by Cursor Bugbot for commit 406d4ab. Configure here.