From df84388ab71239e392837a548a3e1c4d54c4c5de Mon Sep 17 00:00:00 2001
From: Yuriy Andamasov <yuriy@vyos.io>
Date: Wed, 12 Aug 2026 21:22:12 +0300
Subject: seed: initial Codecov Global YAML + plumbing
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bootstrap content for the vyos org Codecov Global YAML mirror. codecov.yml is the
comment-free dashboard-paste payload (Codecov strips comments on save); validate.yml
gates all PRs against https://codecov.io/validate. AGENTS.md + README.md document
the dashboard-paste protocol and language-applicability caveats.

Companion repo: VyOS-Networks/codecov (filed Wave 2, ~1 week soak).
Spec: [VYOS/894337074](https://vyos.atlassian.net/wiki/spaces/VYOS/pages/894337074)
Phorge: T9078
IS: IS-609

🤖 Generated by [robots](https://vyos.io)
---
 .github/copilot-instructions.md |  1 +
 .github/workflows/validate.yml  | 29 +++++++++++++++++++++++++++++
 2 files changed, 30 insertions(+)
 create mode 120000 .github/copilot-instructions.md
 create mode 100644 .github/workflows/validate.yml

(limited to '.github')

diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
new file mode 120000
index 0000000..be77ac8
--- /dev/null
+++ b/.github/copilot-instructions.md
@@ -0,0 +1 @@
+../AGENTS.md
\ No newline at end of file
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
new file mode 100644
index 0000000..f6096b0
--- /dev/null
+++ b/.github/workflows/validate.yml
@@ -0,0 +1,29 @@
+name: validate
+on:
+  pull_request:
+  push:
+    branches: [production]
+  workflow_dispatch:
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Audit egress
+        continue-on-error: true
+        uses: bullfrogsec/bullfrog@7bc9b6e13e2dd9cbe5861f33bc26dc6bdb9d9ed2   # v0.10.0
+        with:
+          egress-policy: audit
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0   # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Validate codecov.yml structure
+        run: |
+          set -euo pipefail
+          response=$(curl -sS --fail-with-body -X POST \
+            --connect-timeout 10 --max-time 60 \
+            --data-binary @codecov.yml \
+            https://codecov.io/validate)
+          echo "$response"
-- 
cgit v1.2.3