From a379555a717b61f29a736fbb4354b1d58bf9811f Mon Sep 17 00:00:00 2001
From: Mike Nguyen <hey@mike.ee>
Date: Mon, 16 Mar 2026 21:43:34 +0000
Subject: [PATCH] chore(ci): add codecov secret and O(1) run only

(and limits the run to O(1) rather than O(n))

Signed-off-by: Mike Nguyen <hey@mike.ee>
---
 .github/workflows/itests.yml    |  5 +++++
 .github/workflows/sdk_build.yml | 13 ++++++++++---
 2 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/itests.yml b/.github/workflows/itests.yml
index 37e171d8e..b876ea030 100644
--- a/.github/workflows/itests.yml
+++ b/.github/workflows/itests.yml
@@ -17,16 +17,19 @@ jobs:
           framework: 'net8.0'
           prefix: 'net8'
           install-version: '8.0.x'
+          upload_coverage: false
         - dotnet-version: '9.0'
           display-name: '.NET 9.0'
           framework: 'net9.0'
           prefix: 'net9'
           install-version: '9.0.x'
+          upload_coverage: false
         - dotnet-version: '10.0'
           display-name: '.NET 10.0'
           framework: 'net10.0'
           prefix: 'net10'
           install-version: '10.0.x'
+          upload_coverage: true
     env:
       NUPKG_OUTDIR: bin/Release/nugets
       GOVER: 1.20.3
@@ -155,9 +158,11 @@ jobs:
         if: github.event_name == 'pull_request' && (steps.tests.outcome != 'success' || steps.generator-tests.outcome != 'success')
         run: exit 1
       - name: Upload test coverage
+        if: ${{ matrix.upload_coverage == true }}
         uses: codecov/codecov-action@v1
         with:
           flags: ${{ matrix.framework }}
+          token: ${{ secrets.CODECOV_API_KEY }}
       - name: Parse Trx files
         uses: NasAmin/trx-parser@v0.1.0
         id: trx-parser
diff --git a/.github/workflows/sdk_build.yml b/.github/workflows/sdk_build.yml
index 072288e26..d742600c5 100644
--- a/.github/workflows/sdk_build.yml
+++ b/.github/workflows/sdk_build.yml
@@ -139,9 +139,9 @@ jobs:
 
           # Static axes
           dotnets='[
-            {"dotnet-version":"8.0", "display-name":".NET 8.0", "framework":"net8.0", "prefix":"net8", "install-version":"8.0.x"},
-            {"dotnet-version":"9.0", "display-name":".NET 9.0", "framework":"net9.0", "prefix":"net9", "install-version":"9.0.x"},
-            {"dotnet-version":"10.0", "display-name":".NET 10.0", "framework":"net10.0", "prefix":"net10", "install-version":"10.0.x"}
+            {"dotnet-version":"8.0", "display-name":".NET 8.0", "framework":"net8.0", "prefix":"net8", "install-version":"8.0.x", "upload_coverage": false},
+            {"dotnet-version":"9.0", "display-name":".NET 9.0", "framework":"net9.0", "prefix":"net9", "install-version":"9.0.x", "upload_coverage": false},
+            {"dotnet-version":"10.0", "display-name":".NET 10.0", "framework":"net10.0", "prefix":"net10", "install-version":"10.0.x", "upload_coverage": true}
           ]'
           oss='["ubuntu-latest"]'
 
@@ -239,9 +239,11 @@ jobs:
           /p:GITHUB_ACTIONS=false
         timeout-minutes: 60
       - name: Upload test coverage
+        if: ${{ matrix.upload_coverage == true }}
         uses: codecov/codecov-action@v1
         with:
           flags: ${{ matrix.framework }}
+          token: ${{ secrets.CODECOV_API_KEY }}
       - name: Parse Trx files
         uses: NasAmin/trx-parser@v0.2.0
         id: trx-parser
@@ -270,16 +272,19 @@ jobs:
           framework: 'net8.0'
           prefix: 'net8'
           install-version: '8.0.x'
+          upload_coverage: false
         - dotnet-version: '9.0'
           display-name: '.NET 9.0'
           framework: 'net9.0'
           prefix: 'net9'
           install-version: '9.0.x'
+          upload_coverage: false
         - dotnet-version: '10.0'
           display-name: '.NET 10.0'
           framework: 'net10.0'
           prefix: 'net10'
           install-version: '10.0.x'
+          upload_coverage: true
     steps:
     - uses: actions/checkout@v1
     - name: Parse release version
@@ -308,9 +313,11 @@ jobs:
       if: github.event_name == 'pull_request' && steps.tests.outcome != 'success'
       run: exit 1
     - name: Upload test coverage
+      if: ${{ matrix.upload_coverage == true }}
       uses: codecov/codecov-action@v1
       with:
         flags: ${{ matrix.framework }}
+        token: ${{ secrets.CODECOV_API_KEY }}
     - name: Parse Trx files
       uses: NasAmin/trx-parser@v0.2.0
       id: trx-parser