Codecov is back (#1390)

Author: RingerJK

.circleci/config.yml

@@ -57,22 +57,20 @@ commands:
       - run:
           name: Check Java code style
           command: make checkstyle
-      - run:
-          name: Jacoco test report
-          command: ./gradlew jacocoTestReport
       - run:
           name: Run unit-test for all modules
           command: make test
+      - run:
+          name: Jacoco test report
+          command: ./gradlew jacocoTestReport
       - store_artifacts:
           path: mapbox/app/build/reports
           destination: reports
       - store_test_results:
           path: mapbox/app/build/test-results
-#      Disabling Codecov (for now) due to https://about.codecov.io/security-update/
-#      - run:
-#          name: Post code coverage report to Codecov.io
-#          command: |
-#            bash <(curl -s https://codecov.io/bash)
+      - run:
+          name: Post code coverage report to Codecov.io
+          command: sh scripts/coverage.sh
 
   setup-aws-credentials:
     steps:

codecov.yml

@@ -0,0 +1,12 @@
+codecov:
+  require_ci_to_pass: false
+  notify:
+    wait_for_ci: false
+    threshold': 1%
+
+comment:
+  layout: "reach, diff, flags, files"
+  behavior: default
+  require_changes: false
+  require_base: no
+  require_head: yes

gradle/dependencies.gradle

@@ -21,7 +21,7 @@ ext {
       buildConfig: '1.1.8',
       dependencyGraph: '0.4.0',
       bintray    : '1.8.4',
-      jacoco     : '0.8.6',
+      jacoco     : '0.8.7',
       maven      : '3.6.2',
       artifactory: '4.9.3',
       kotlin     : '1.3.72',

gradle/jacoco.gradle

@@ -11,7 +11,6 @@ test {
 }
 
 jacocoTestReport{
-    dependsOn test
     group = 'Coverage reports'
     description = 'Generates a test coverage report for a project'
 

scripts/coverage.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+set -eoux
+# control sum of the key is const: echo | shasum -a 256 pgp_keys.asc
+shaSumAscKey="d56942c32a1bb70af75bf972302b6114049fb59cb76193fac349bb9b587b60c2"
+
+curl https://keybase.io/codecovsecurity/pgp_keys.asc -o pgp_keys.asc
+# check sum
+echo "$shaSumAscKey  pgp_keys.asc" | shasum -a 256 -c
+
+gpg --no-default-keyring --keyring trustedkeys.gpg --import pgp_keys.asc
+
+curl -Os https://uploader.codecov.io/latest/linux/codecov
+
+curl -Os https://uploader.codecov.io/latest/linux/codecov.SHA256SUM
+
+curl -Os https://uploader.codecov.io/latest/linux/codecov.SHA256SUM.sig
+
+gpgv codecov.SHA256SUM.sig codecov.SHA256SUM
+
+# check sum
+shasum -a 256 -c codecov.SHA256SUM
+
+chmod +x codecov
+./codecov