search

intel / cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
https://cve-bin-tool.readthedocs.io/en/latest/
GNU General Public License v3.0
1.23k stars 464 forks source link

ci: pull request aren't being reported with code coverage reports #4317

Open mastersans opened 3 months ago

mastersans commented 3 months ago

I am really unsure what is up with the code coverage but the CodeCov is not being shown as the part of the pull request and the codecov report is also outdated on the repository, show for the commit https://github.com/intel/cve-bin-tool/commit/1e501f19d7b7a49b93f14cfd20b0f50e603690b4 , Report: https://app.codecov.io/gh/intel/cve-bin-tool/commit/1e501f19d7b7a49b93f14cfd20b0f50e603690b4

terriko commented 3 months ago

I had to re-accept the terms and conditions when I logged in, so that might have solved things, or it's possible that we need to switch to using their config file: https://docs.codecov.com/docs/codecov-yaml

I think anyone could add the config file so if it doesn't start working on your next PR maybe try adding the config?