ci: Add code coverage

[simar7]

This adds code coverage to each PR we create.

Addresses: #563

Signed-off-by: Simarpreet Singh simar@linux.com

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (master@4d721e1). Click here to learn what that means.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master     #572   +/-   ##
=========================================
  Coverage          ?   55.68%           
=========================================
  Files             ?       44           
  Lines             ?     2085           
  Branches          ?        0           
=========================================
  Hits              ?     1161           
  Misses            ?      803           
  Partials          ?      121           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 4d721e1...b70c86e. Read the comment docs.

[knqyf263]

Thanks! Does Codecov affect the test result? For example, it fails the test if the coverage is reduced. It's OK If it's not the case. In my experience, the coverage is useful, but it doesn't need to affect the test result.

[simar7]

Thanks! Does Codecov affect the test result? For example, it fails the test if the coverage is reduced. It's OK If it's not the case. In my experience, the coverage is useful, but it doesn't need to affect the test result.

We can run it in informational mode where the PR is not gated (failed) if the coverage is lower than what it was before. See more https://docs.codecov.io/docs/commit-status#branches

I've changed it to behave like that now. Thoughts?

[knqyf263]

It looks great to me 👍

[lizrice]

lgtm

[lizrice]

Would it make sense to run codecov over other Trivy repos e.g. fanal?

[knqyf263]

Yes, we should add codecov in fanal and trivy-db as well.