[ruaan-deysel]

Pull Request

Description

Configure Codecov GitHub Actions workflow to support tokenless uploads on public repositories by providing the repository slug and omitting the Codecov token secret dependency across Go coverage, web coverage, and test results uploads.

Type of Change

• fix: Bug fix (non-breaking change which fixes an issue)
• feat: New feature (non-breaking change which adds functionality)
• refactor: Code refactoring without behavioral changes
• perf: Performance improvement
• docs: Documentation updates or additions
• test: Test suite additions or improvements
• chore: Build, CI, dependencies, or tooling changes

Pre-Submission Governance

• I built and ran the project locally and verified this change actually works (not just that it compiles)
• I ran make test locally and all backend tests pass
• I ran make pre-commit-run (lint + security checks) locally and it passes
• I pasted real local verification output under Testing Performed below (no placeholder text)
• This PR is self-contained and is not a duplicate; I have not opened other overlapping or back-to-back PRs for the same change
• If an AI agent created or assisted with this PR, a human reviewed and verified the changes before submission

Related Issues

None

Area & Target

• Area:
  • area: api / area: mcp / area: replication
  • area: engine / area: runner
  • area: storage / area: safepath
  • area: db / area: anomaly
  • area: scheduler
  • area: web (Svelte UI)
  • area: plugin (Unraid integration / PHP / packaging)
  • area: infra / area: docs
• Target (if backup-engine related):
  • target: containers (Docker)
  • target: vms (Libvirt/KVM)
  • target: folders (Flash / Filesystems)
  • target: plugins (Unraid Plugins)
  • target: flash (Unraid USB Flash)
  • N/A

Changes Made

• Updated .github/workflows/build.yml to specify slug: ${{ github.repository }} and remove token: ${{ secrets.CODECOV_TOKEN }} for Go coverage, web coverage, and test results.
• Added entry to CHANGELOG.md under [Unreleased].

Security & Sensitive Operations

• No hardcoded secrets, API tokens, passwords, private keys, or private host addresses
• Untrusted or storage-relative paths use internal/safepath
• Sensitive operations (restore, deletion, database changes, remapping) preserve safety boundaries
• N/A — No sensitive logic or path handling changed

Testing Performed

• Targeted Go unit/integration tests run (go test ./internal/...)
• Full backend tests run (make test)
• Go linting and formatting clean (make lint, gofmt, goimports)
• Security scans passed (make security-check)
• Frontend tests passing (npm --prefix web test) (if web/ touched)
• Frontend linting & build clean (npm --prefix web run lint, npm --prefix web run build) (if web/ touched)
• Pre-commit hooks passed (make pre-commit-run)
• Not applicable (documentation-only or metadata change)

Test Results

go test ./cmd/... ./internal/config/... -v
--- PASS: TestGetExclusionPreset (0.00s)
--- PASS: TestImmichPresetCoversBothLayouts (0.00s)
--- PASS: TestGetPresetMeta (0.00s)
--- PASS: TestAllPresetsNonEmpty (0.00s)
PASS
ok      github.com/ruaan-deysel/vault/internal/config   (cached)

Documentation

• Code comments added/updated
• Documentation updated in docs/
• README.md updated (if needed)
• CHANGELOG.md updated under [Unreleased]
• No documentation needed

Breaking Changes

None

Checklist

• I have updated CHANGELOG.md under [Unreleased] with details of this change
• PR title follows Conventional Commits (e.g., feat(ui): ..., fix(engine): ..., docs: ...)
• Linked relevant GitHub issue(s) above or noted "None"
• Pure Go maintained (CGO_ENABLED=0) with SQLite WAL mode and connection pragmas respected
• I have performed a self-review of my own code
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works (if applicable)
• New and existing tests pass locally with my changes
• No sensitive information (tokens, passwords, personal data) is included

Summary by CodeRabbit

• Chores
  • Updated automated coverage and test-results reporting to identify the repository during uploads, without requiring an upload token.
  • Test-results upload errors no longer cause the build workflow to fail. These changes affect automated project reporting and build checks; they do not change app features or behavior for end users.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 46202e51-88d0-4973-8106-1a4e924491e7

---

📥 Commits

Reviewing files that changed from the base of the PR and between 215f46a and 1fed88d.

---

📒 Files selected for processing (2)

• .github/workflows/build.yml
• CHANGELOG.md

---

 ____________________________________________________________
< If you don't finish then you're just busy, not productive. >
 ------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.