gha: add codecov

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

.github/codecov.yml

@@ -0,0 +1,15 @@
+comment: false
+
+github_checks:
+  annotations: false
+
+coverage:
+  status:
+    patch: false
+    # project will give us the diff in the total code coverage between a commit
+    # and its parent
+    project:
+      default:
+        target: auto
+        threshold: "15%"
+    changes: false

.github/workflows/test.yml

@@ -44,6 +44,11 @@ jobs:
       run: |
         uname -a
         make test
+    - name: Send to Codecov
+      uses: codecov/codecov-action@v5
+      with:
+        token: ${{ secrets.CODECOV_TOKEN }}  # used to upload coverage reports: https://github.com/moby/buildkit/pull/4660#issue-2142122533
+        files: capability/coverage.txt,mount/coverage.txt,mountinfo/coverage.txt,reexec/coverage.txt,sequential/coverage.txt,signal/coverage.txt,symlink/coverage.txt,user/coverage.txt,userns/coverage.txt
 
   codespell:
     runs-on: ubuntu-24.04

.gitignore

@@ -1,2 +1,3 @@
 /_build/
 /mount/go-local.*
+coverage.txt

Makefile

@@ -11,6 +11,7 @@ all: clean lint test cross
 .PHONY: clean
 clean:
 	$(RM) mount/go-local.*
+	$(RM) */coverage.txt
 
 .PHONY: foreach
 foreach: ## Run $(CMD) for every package.
@@ -25,7 +26,7 @@ foreach: ## Run $(CMD) for every package.
 
 .PHONY: test
 test: test-local
-test: CMD=go test $(RUN_VIA_SUDO) -v .
+test: CMD=go test $(RUN_VIA_SUDO) -v -coverprofile=coverage.txt -covermode=atomic .
 test: foreach
 
 # Test the mount module against the local mountinfo source code instead of the