Merge pull request #169 from kannkyo/kannkyo-patch-1

Update python-ci.yml

.github/workflows/bandit.yml

@@ -29,7 +29,7 @@ jobs:
 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Bandit Scan
         uses: shundor/python-bandit-scan@9cc5aa4a006482b8a7f91134412df6772dbda22c
         with: # optional arguments

.github/workflows/python-ci.yml

@@ -62,18 +62,25 @@ jobs:
           check_name: pytest results
           junit_files: report.xml
 
-      - name: Upload pytest coverage report to artifact
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
+      - name: Upload test results to codecov
+        if: ${{ !cancelled() }}
+        uses: codecov/test-results-action@9739113ad922ea0a9abb4b2c0f8bf6a4aa8ef820
         with:
-          name: pytest-cov-report
-          path: htmlcov/
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: report.xml
 
       - name: Upload pytest report to artifact
         uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
         with:
           name: pytest-report
           path: report.html
 
+      - name: Upload pytest coverage report to artifact
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
+        with:
+          name: pytest-cov-report
+          path: htmlcov/
+
       - name: Upload coverage to codecov
         uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e
         with:

.github/workflows/python-publish.yml

@@ -56,7 +56,7 @@ jobs:
           password: ${{ secrets.PYPI_API_TOKEN }}
 
       - name: attest build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb
         with:
           subject-path: |
             dist/${{ steps.build.outputs.package_tar }}