[wip] add coverage tests in ci

Change-Id: Iffdf510d5cf714d6364e335fa494ea36ac4242b1
Signed-off-by: Yi-Hsuan Deng <yhdeng@google.com>

Author: sasdf

.github/actions/prepare-env/action.yml

@@ -94,15 +94,15 @@ runs:
     # This needs access to secrets and thus doesn't work for pull request.
     - uses: google-github-actions/auth@v2
       id: google_auth
-      if: github.event_name != 'pull_request' && inputs.service_account_json != ''
+      if: inputs.service_account_json != ''
       with:
         credentials_json: '${{ inputs.service_account_json }}'
 
     # The above action creates a credential file in workspace and it doesn't provide a way to configure
     # it. This influences with a few scripts that assume clean workspace, and introduce security risk
     # that it may be exposed when uploading to buckets.
     - name: Move Google credentials out from workspace
-      if: github.event_name != 'pull_request' && inputs.service_account_json != ''
+      if: inputs.service_account_json != ''
       run: |
         SOURCE=${{ steps.google_auth.outputs.credentials_file_path }}
         TARGET=${{ runner.temp }}/$(basename "$SOURCE")
@@ -113,7 +113,7 @@ runs:
       shell: bash
 
     - uses: google-github-actions/setup-gcloud@v2
-      if: github.event_name != 'pull_request' && inputs.service_account_json != ''
+      if: inputs.service_account_json != ''
 
     - name: Configure ~/.bazelrc
       if: inputs.configure-bazel == 'true'

.github/actions/publish-bazel-test-results/action.yml

@@ -56,3 +56,16 @@ runs:
         report_paths: ${{ inputs.merged-results }}
         annotate_only: true
         detailed_summary: true
+
+    - name: Collect coverage reports
+      id: collect_coverage
+      shell: bash
+      run: ci/scripts/collect-coverage-report.sh /tmp/coverage_report
+
+    - name: Upload coverage report
+      if: steps.collect_coverage.outputs.coverageReport == 'ok'
+      uses: actions/upload-artifact@v4
+      with:
+        name: ${{ inputs.artifact-name }}-coverage
+        path: /tmp/coverage_report
+        overwrite: true