From 666fb09317dbe091f7a61422762e0928d5ae871a Mon Sep 17 00:00:00 2001
From: kannkyo <15080890+kannkyo@users.noreply.github.com>
Date: Wed, 11 Dec 2024 21:05:36 +0900
Subject: [PATCH 1/3] Update python-ci.yml

---
 .github/workflows/python-ci.yml | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml
index 0a5266f..c00853c 100644
--- a/.github/workflows/python-ci.yml
+++ b/.github/workflows/python-ci.yml
@@ -54,7 +54,7 @@ jobs:
 
       - name: Test python code by pytest
         continue-on-error: true
-        run: poetry run pytest
+        run: poetry run pytest --cov -o junit_family=legacy
 
       - name: Publish pytest report to PR
         uses: EnricoMi/publish-unit-test-result-action@170bf24d20d201b842d7a52403b73ed297e6645b
@@ -62,11 +62,12 @@ jobs:
           check_name: pytest results
           junit_files: report.xml
 
-      - name: Upload pytest coverage report to artifact
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
+      - name: Upload test results to codecov
+        if: ${{ !cancelled() }}
+        uses: codecov/test-results-action@9739113ad922ea0a9abb4b2c0f8bf6a4aa8ef820
         with:
-          name: pytest-cov-report
-          path: htmlcov/
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: report.xml
 
       - name: Upload pytest report to artifact
         uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
@@ -74,6 +75,12 @@ jobs:
           name: pytest-report
           path: report.html
 
+      - name: Upload pytest coverage report to artifact
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
+        with:
+          name: pytest-cov-report
+          path: htmlcov/
+
       - name: Upload coverage to codecov
         uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e
         with:

From 086c824de3a39f4567e93690bd02e7d3b7a5b4aa Mon Sep 17 00:00:00 2001
From: kannkyo <15080890+kannkyo@users.noreply.github.com>
Date: Wed, 11 Dec 2024 21:08:19 +0900
Subject: [PATCH 2/3] fix Pinned-Dependencies

---
 .github/workflows/bandit.yml         | 2 +-
 .github/workflows/python-publish.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml
index 13dfafa..0d9ae3a 100644
--- a/.github/workflows/bandit.yml
+++ b/.github/workflows/bandit.yml
@@ -29,7 +29,7 @@ jobs:
 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Bandit Scan
         uses: shundor/python-bandit-scan@9cc5aa4a006482b8a7f91134412df6772dbda22c
         with: # optional arguments
diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index 76686cc..b39d3d6 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -56,7 +56,7 @@ jobs:
           password: ${{ secrets.PYPI_API_TOKEN }}
 
       - name: attest build provenance
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb
         with:
           subject-path: |
             dist/${{ steps.build.outputs.package_tar }}

From 6123dfbd5570601c39d01f4954ff6a2bb9314ca9 Mon Sep 17 00:00:00 2001
From: kannkyo <15080890+kannkyo@users.noreply.github.com>
Date: Wed, 11 Dec 2024 21:09:55 +0900
Subject: [PATCH 3/3] update ci config

---
 .github/workflows/python-ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml
index c00853c..7fc00e3 100644
--- a/.github/workflows/python-ci.yml
+++ b/.github/workflows/python-ci.yml
@@ -54,7 +54,7 @@ jobs:
 
       - name: Test python code by pytest
         continue-on-error: true
-        run: poetry run pytest --cov -o junit_family=legacy
+        run: poetry run pytest
 
       - name: Publish pytest report to PR
         uses: EnricoMi/publish-unit-test-result-action@170bf24d20d201b842d7a52403b73ed297e6645b