Restricted GITHUB_TOKEN_PERMISSION #34

	name: Generate Rust Code Coverage

	on:
	workflow_dispatch:
	pull_request:
	branches:
	- "main"

	env:
	CARGO_TERM_COLOR: always

	permissions:
	contents: read


	jobs:
	coverage_with_code_cov:
	runs-on: ubuntu-latest
	services:
	redis:
	image: redis:7-alpine
	ports:
	- 6379:6379
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4
	- name: Cache Cargo registry
	uses: actions/cache@v4
	with:
	path: ~/.cargo/registry
	key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
	restore-keys: \|
	${{ runner.os }}-cargo-registry-

	- name: Cache Cargo index
	uses: actions/cache@v4
	with:
	path: ~/.cargo/git
	key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
	restore-keys: \|
	${{ runner.os }}-cargo-index-

	- name: Cache Cargo build
	uses: actions/cache@v4
	with:
	path: target
	key: ${{ runner.os }}-cargo-build-${{ hashFiles('**/Cargo.lock') }}
	restore-keys: \|
	${{ runner.os }}-cargo-build-
	- name: Install Rust
	run: rustup update stable
	- name: Install cargo-llvm-cov
	uses: taiki-e/install-action@cargo-llvm-cov
	- name: Generate code coverage
	env:
	REDIS_URL: redis://localhost:6379
	run: \|
	cd core
	cargo llvm-cov --all-features --workspace --lcov --output-path lcov.info
	- name: Upload coverage to Codecov
	uses: codecov/codecov-action@v3
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	files: core/lcov.info
	fail_ci_if_error: true

Provide feedback