#2461: Add CODECOV_TOKEN secret to bake and use it

Author: JacobDomagala

.github/workflows/build-docker-images.yml

@@ -65,3 +65,4 @@ jobs:
           push: ${{ github.ref == 'refs/heads/develop' }}
         env:
           GIT_BRANCH: ${{ github.head_ref || github.ref_name }}
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

ci/docker/vt.dockerfile

@@ -54,6 +54,7 @@ EOF
 ENV GIT_BRANCH=${GIT_BRANCH}
 
 RUN --mount=target=/vt,rw \
+    --mount=type=secret,id=CODECOV_TOKEN,env=CODECOV_TOKEN \
         if [ "${VT_TEST_SPACK}" = "1" ]; then \
             apt update -y -q && apt install -y -q libssl-dev unzip && \
             /vt/ci/test_spack_package.sh; \

ci/test_cpp.sh

@@ -14,6 +14,10 @@ ctest --output-on-failure -L 'unit_test|example' | tee cmake-output.log
 
 if test "${VT_CODE_COVERAGE:-0}" -eq 1
 then
+    if [ -z "$CODECOV_TOKEN" ]; then
+        echo "Error: CODECOV_TOKEN is not set"
+        exit 1
+    fi
     export CODECOV_TOKEN="$CODECOV_TOKEN"
     lcov --capture --directory . --output-file coverage.info
     lcov --remove coverage.info '/usr/*' --output-file coverage.info

docker-bake.hcl

@@ -187,6 +187,8 @@ target "vt-build" {
   ulimits = [
     "core=0"
   ]
+
+  secret = ["id=CODECOV_TOKEN,env=CODECOV_TOKEN"]
   # FIXME: verify that caching works as intended
   # cache-from = [
   #   {