Merge pull request #42 from nyu-devops/update-permissions

Upgrade permissions and Codecov action and add installation step

Author: rofrano

.github/workflows/bdd-tests.yml

@@ -15,6 +15,10 @@ on:
     - '.vscode/**'
     - '**.md'
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/tdd-tests.yml

@@ -15,6 +15,10 @@ on:
     - '.vscode/**'
     - '**.md'
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -61,7 +65,12 @@ jobs:
           FLASK_APP: "wsgi:app"
           DATABASE_URI: "postgresql+psycopg://postgres:pgs3cr3t@postgres:5432/testdb"
 
-      - name: Upload code coverage
-        uses: codecov/[email protected]
-        with: 
+      - name: Install packages for Codecov to work
+        run: apt update && apt install -y git curl gpg
+
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@v5
+        with:
           token: ${{ secrets.CODECOV_TOKEN }}
+          slug: nyu-devops/lab-flask-bdd
+