feat(59649): enable code coverage as part of the CI/CD

.github/workflows/ci-cd-java.yml

@@ -6,11 +6,6 @@ permissions:
 
 on:
   workflow_call:
-    secrets:
-      DOCKER_USERNAME:
-        required: true
-      DOCKER_PASSWORD:
-        required: true
     inputs:
       # it is required for backwards compatibility with CI/CD pipelines that have not been yet fully migrated to shared workflows
       uploadJarArtifact:
@@ -68,15 +63,36 @@ jobs:
 
       - name: Run tests outside Docker
         working-directory: ${{ inputs.workingDirectory }}
-        run: mvn test
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          JAVA_TOOL_OPTIONS: ""
+          MAVEN_OPTS: ""
+        run: mvn -B test
 
       - name: Run Integration tests (Testcontainers)
         working-directory: ${{ inputs.workingDirectory }}
-        run: mvn verify
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DOCKER_HOST: unix:///var/run/docker.sock
+          TESTCONTAINERS_DOCKER_SOCKET_OVERRIDE: /var/run/docker.sock
+          JAVA_TOOL_OPTIONS: ""
+          MAVEN_OPTS: ""
+        run: mvn -B verify
+
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: true
+          verbose: true
+
+      - name: Upload test results to Codecov
+        if: ${{ !cancelled() }}
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: true
+          report_type: test_results
 
       - name: Build artifact
         working-directory: ${{ inputs.workingDirectory }}
@@ -159,12 +175,12 @@ jobs:
         if: ${{ env.PERFORM_RELEASE == 'true' }}
         uses: docker/setup-buildx-action@v3
 
-      - name: Login to Github Container Registry
+      - name: Login to Docker Hub
         if: ${{ env.PERFORM_RELEASE == 'true' }}
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
+          username: ${{ secrets.DOCKER_HUB_INFODEVOPS_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_INFODEVOPS_TOKEN }}
 
       - name: Build & Push Docker image
         if: ${{ env.PERFORM_RELEASE == 'true' }}
@@ -173,4 +189,4 @@ jobs:
           context: ${{ inputs.workingDirectory }}
           push: ${{ env.PERFORM_RELEASE }}
           tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
+          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/ci-cd-kotlin.yml

@@ -1,11 +1,11 @@
 name: ci-cd-kotlin.yml
+
+permissions:
+  contents: read
+  packages: read
+
 on:
   workflow_call:
-    secrets:
-      DOCKER_USERNAME:
-        required: true
-      DOCKER_PASSWORD:
-        required: true
     inputs:
       uploadJarArtifact:
         required: false
@@ -44,12 +44,32 @@ jobs:
           cache: 'gradle'
 
       - name: Check code format and lint
-        run: ./gradlew spotlessApply
+        run: ./gradlew spotlessCheck
         env:
+          GITHUB_ACTOR: ${{ github.actor }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Run tests
-        run: ./gradlew test
+        env:
+          GITHUB_ACTOR: ${{ github.actor }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+            ./gradlew test jacocoTestReport --stacktrace
+
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: true
+          verbose: true
+
+      - name: Upload test results to Codecov
+        if: ${{ !cancelled() }}
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: true
+          report_type: test_results
 
       - name: Upload .jar artifact
         if: ${{ inputs.uploadJarArtifact }}
@@ -60,6 +80,9 @@ jobs:
 
       - name: Build artifact
         run: ./gradlew build -x test
+        env:
+          GITHUB_ACTOR: ${{ github.actor }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Lowercase Docker Image Name
         run: |
@@ -107,8 +130,8 @@ jobs:
         if: env.PERFORM_RELEASE == 'true'
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
+          username: ${{ secrets.DOCKER_HUB_INFODEVOPS_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_INFODEVOPS_TOKEN }}
 
       - name: Build & Push Docker image
         if: env.PERFORM_RELEASE == 'true'
@@ -117,4 +140,4 @@ jobs:
           context: .
           push: ${{ env.PERFORM_RELEASE }}
           tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
+          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/ci-cd-typescript.yml

@@ -1,20 +1,11 @@
 name: ci-cd-typescript.yml
 on:
   workflow_call:
-    secrets:
-      DOCKER_USERNAME:
-        required: true
-      DOCKER_PASSWORD:
-        required: true
     inputs:
       checkAndTestOutsideDocker:
         required: false
         type: boolean
         default: false
-      codeCoverageEnabled:
-        required: false
-        type: boolean
-        default: false
       performRelease:
         required: false
         type: boolean
@@ -52,19 +43,24 @@ jobs:
 
       - name: Check and test outside Docker
         if: ${{ inputs.checkAndTestOutsideDocker }}
-        run: npm run check-and-build
+        run: |
+          npm run check-and-build
+          npm run test -- --coverage
 
       - name: Upload coverage reports to Codecov
-        if: ${{ inputs.codeCoverageEnabled }}
         uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: true
+          verbose: true
 
       - name: Upload test results to Codecov
-        if: ${{ inputs.codeCoverageEnabled  && !cancelled() }}
-        uses: codecov/test-results-action@v1
+        if: ${{ !cancelled() }}
+        uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: true
+          report_type: test_results
 
       - name: Check if perform release
         id: perform_release
@@ -118,8 +114,8 @@ jobs:
         if: env.PERFORM_RELEASE == 'true'
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
+          username: ${{ secrets.DOCKER_HUB_INFODEVOPS_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_INFODEVOPS_TOKEN }}
 
       - name: Build and push
         if: env.PERFORM_RELEASE == 'true'

.gitignore

@@ -1 +1,2 @@
-.idea
+.idea
+/AGENTS.md