[SPARK-50633][FOLLOWUP] Let CODECOV_TOKEN transfer to build_and_test.yml

[panbingkun]

What changes were proposed in this pull request?

The pr aims to let CODECOV_TOKEN transfer from build_coverage.yml/build_main.yml to build_and_test.yml.

Why are the changes needed?

Currently, codecov/codecov-action is unable to obtain CODECOV_TOKEN.
I checked and it seems that the usage below is similar to ours.
https://stackoverflow.com/questions/78298827/why-is-codecov-upload-step-in-github-actions-not-finding-the-token
Let's continue to try it out.

Does this PR introduce any user-facing change?

No.

How was this patch tested?

Manually check.

Was this patch authored or co-authored using generative AI tooling?

No.

[panbingkun]

cc @dongjoon-hyun @HyukjinKwon @zhengruifeng @LuciferYang
Could you take a look? I want to try this approach.
Thanks!

[LuciferYang]

After this change, will inputs.codecov_token be in plaintext?

[panbingkun]

Using the current approach, token is no longer plaintext.

[dongjoon-hyun]

Just want to check. According to the commit log and CI result, this isn't ready yet. Did I understand correctly, @panbingkun ?

[panbingkun]

Just want to check. According to the commit log and CI result, this isn't ready yet. Did I understand correctly, @panbingkun ?

• Yeah, the first version should be functional, but there may be security issues;
• In the subsequent updates, I encountered an issue as follows:
  when I add secrets.codecov_token to build_main.yml

the following error will occur @HyukjinKwon, do you know what the possible reasons could be?

• And it seems that notify_test_workflow.yml cannot be debugged, I am trying to find a solution to it.

[panbingkun]

@dongjoon-hyun
I think I've already taken care of this issue.
(BTW, I created a new mock repo myself to conduct validation testing and debugging).

[panbingkun]

• I have verified it in my own mock repo:
  [Codecov Test] Test My Mock Repo panbingkun/github-actions#1

https://github.com/panbingkun/github-actions/actions/runs/12804808017/job/35700210844

• Meanwhile, I am conducting further verification on my own Spark repo.
  [Don't Review][ONLY TEST] Test My Fork Spark Repo Codecov #49499
  https://github.com/panbingkun/spark/actions/runs/12805018154/job/35700637278

[LuciferYang]

So the previous issue was whether codecov_token shouldn't specify default?

[panbingkun]

type and default cannot be set in secrets, otherwise an error will be reported.

[LuciferYang]

hmm... can we make a clean one?

[panbingkun]

hmm... can we make a clean one?

Okay

#49527.

[panbingkun]

closing in favor of #49527