#2461: Add CODECOV_TOKEN secret to bake and use it

Author: JacobDomagala

.github/workflows/build-docker-images.yml

@@ -61,3 +61,5 @@ jobs:
           targets: ${{ matrix.target }}
           files: docker-bake.hcl
           push: ${{ github.ref == 'refs/heads/develop' }}
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

ci/docker/vt.dockerfile

@@ -50,6 +50,7 @@ fi
 EOF
 
 RUN --mount=target=/vt,rw \
-        /vt/ci/build_cpp.sh /vt /build && \
-        /vt/ci/test_cpp.sh /vt /build  && \
-        /vt/ci/build_vt_sample.sh /vt /build
+    --mount=type=secret,id=CODECOV_TOKEN,env=CODECOV_TOKEN \
+    /vt/ci/build_cpp.sh /vt /build && \
+    /vt/ci/test_cpp.sh /vt /build && \
+    /vt/ci/build_vt_sample.sh /vt /build

ci/test_cpp.sh

@@ -14,6 +14,10 @@ ctest --output-on-failure -L 'unit_test|example' | tee cmake-output.log
 
 if test "${VT_CODE_COVERAGE:-0}" -eq 1
 then
+    if [ -z "$CODECOV_TOKEN" ]; then
+        echo "Error: CODECOV_TOKEN is not set"
+        exit 1
+    fi
     export CODECOV_TOKEN="$CODECOV_TOKEN"
     lcov --capture --directory . --output-file coverage.info
     lcov --remove coverage.info '/usr/*' --output-file coverage.info

docker-bake.hcl

@@ -180,6 +180,8 @@ target "vt-build" {
   ulimits = [
     "core=0"
   ]
+
+  secret = ["id=CODECOV_TOKEN,env=CODECOV_TOKEN"]
   # FIXME: verify that caching works as intended
   # cache-from = [
   #   {