Codecov-action failing to properly upload with Dependabot

Before submitting a topic, please confirm the following

I have searched for similar issues before creating this topic.
I have verified that my repository is using the Codecov GitHub app, if using GitHub
I have validated my codecov.yaml configuration file.
I have filled out the below sections to the best of my ability.

Description

Codecov action fails on GitHub private repo. This only happens after it has already been run a couple times, so it appears to be a ratelimiting issue.

Continuation from a GitHub issue: Error: failed to properly upload · Issue #598 · codecov/codecov-action · GitHub

CI/CD URL

Private Repo

Codecov Output

Please provide the full output of running the uploader on your CI/CD. This will typically have the Codecov logo as ASCII.

2022-10-06T02:43:27.5251284Z ##[group]Run codecov/codecov-action@v3
2022-10-06T02:43:27.5251677Z with:
2022-10-06T02:43:27.5252118Z   env_vars: OS,PYTHON
2022-10-06T02:43:27.5252398Z   files: ./coverage.xml
2022-10-06T02:43:27.5252653Z   flags: pytest
2022-10-06T02:43:27.5252908Z   name: codecov-umbrella
2022-10-06T02:43:27.5253178Z   fail_ci_if_error: true
2022-10-06T02:43:27.5253440Z   verbose: true
2022-10-06T02:43:27.5254151Z env:
2022-10-06T02:43:27.5254386Z   OS: ubuntu-latest
2022-10-06T02:43:27.5254636Z   PYTHON: 3.10
2022-10-06T02:43:27.5254961Z   pythonLocation: /opt/hostedtoolcache/Python/3.10.7/x64
2022-10-06T02:43:27.5255358Z   LD_LIBRARY_PATH: /opt/hostedtoolcache/Python/3.10.7/x64/lib
2022-10-06T02:43:27.5255677Z ##[endgroup]
2022-10-06T02:43:27.7162616Z {
2022-10-06T02:43:27.7162874Z   execArgs: [
2022-10-06T02:43:27.7163348Z     '-n',
2022-10-06T02:43:27.7165944Z     'codecov-umbrella',
2022-10-06T02:43:27.7166282Z     '-Q',
2022-10-06T02:43:27.7166572Z     'github-action-3.1.1',
2022-10-06T02:43:27.7166911Z     '-e',
2022-10-06T02:43:27.7167168Z     'OS,PYTHON',
2022-10-06T02:43:27.7167435Z     '-Z',
2022-10-06T02:43:27.7167671Z     '-f',
2022-10-06T02:43:27.7167937Z     './coverage.xml',
2022-10-06T02:43:27.7168205Z     '-F',
2022-10-06T02:43:27.7168435Z     'pytest',
2022-10-06T02:43:27.7168688Z     '-C',
2022-10-06T02:43:27.7169346Z     '8e8581caef937e5cfbae101d44f8c427ca1345d7',
2022-10-06T02:43:27.7169641Z     '-v'
2022-10-06T02:43:27.7169839Z   ]
2022-10-06T02:43:27.7170029Z }
2022-10-06T02:43:27.7170251Z ==> linux OS detected
2022-10-06T02:43:28.2264400Z https://uploader.codecov.io/latest/linux/codecov.SHA256SUM
2022-10-06T02:43:28.2710027Z Received SHA256SUM 20f9c9d78483fce977b6cc39e231a734a23bcd36f4d536bb7355222fb88d02bc  codecov
2022-10-06T02:43:28.2991371Z Received SHA256SUM signature -----BEGIN PGP SIGNATURE-----
2022-10-06T02:43:28.2991760Z 
2022-10-06T02:43:28.2992098Z iQIzBAABCgAdFiEEJwNOf9uFDgu8LGL/gGuyiu13mGkFAmMsvyQACgkQgGuyiu13
2022-10-06T02:43:28.2992607Z mGmStA/+N4roe/N6hA78uO55SL8/8tfS75QYe+PbRF3nN+mpXsyik+gMZWfu9SLT
2022-10-06T02:43:28.2994379Z lQJK2T9PfU6dFx5VnceoENXgnH+SUvDLorKUOwTolXMIEos9bLCPRcgfe3AkTeZR
2022-10-06T02:43:28.2994970Z 2sHZcDj75nmcfEpO9Tf/Jpq2PPrP24J3S822/v3ZT8lca9jJe8CJlBL15yXC1kgD
2022-10-06T02:43:28.2995377Z Vk72+r9KzAoAu6bCEvBOOIFHHNfVBf0635vamRFCHFgjN1rRJW5cuyieZr9rYa22
2022-10-06T02:43:28.2995867Z 1KDpN6vijJwUlrwB7V8wTvaeOEinR5Fzo55TtjTtE4brfaOF2KCzM33Czzep3SfH
2022-10-06T02:43:28.2996327Z OPJENE1+A+/bleRcVok5qmRfvMThSITE98INNk4qCVsB1YqTOvtJs5rFtyuH/Xqf
2022-10-06T02:43:28.2996742Z 674HAqeNjzXvFME5oX4Hm31X1Y4rfzH0738H25J//3GqZWahivq7e8ElyYP+CI0H
2022-10-06T02:43:28.2997297Z pXbeN6E9Zup/QR6YjYWBV35AvRscC7v4e6HnlN9ctTuAd0VZJXI8JLM1XTgiQnIQ
2022-10-06T02:43:28.2997775Z rql/7lIYrvzLerPmzVoAmYZuV2iAE7pxfo3Iy9zEtgV8cF42peE3TDyrqj5Ylbtc
2022-10-06T02:43:28.2998258Z 1pKlfIIAhoB/ff2hIvGonXG4OgTCCQrUvbtI8KsNi6UFPX5jhCaltKMsLG/JPM+Q
2022-10-06T02:43:28.2998714Z vXPa43eZ+aWPHOi9dFdlg98GCFesSVKLECkU4DjoZxJsI493PrQ=
2022-10-06T02:43:28.2999152Z =IHR5
2022-10-06T02:43:28.2999525Z -----END PGP SIGNATURE-----
2022-10-06T02:43:28.2999715Z 
2022-10-06T02:43:28.3338488Z ==> SHASUM file signed by key id 806bb28aed779869
2022-10-06T02:43:28.5531362Z ==> Uploader SHASUM verified (20f9c9d78483fce977b6cc39e231a734a23bcd36f4d536bb7355222fb88d02bc  codecov)
2022-10-06T02:43:28.5534115Z ==> Running version latest
2022-10-06T02:43:28.6649153Z ==> Running version v0.3.2
2022-10-06T02:43:28.6676303Z [command]/home/runner/work/_actions/codecov/codecov-action/v3/dist/codecov -n codecov-umbrella -Q github-action-3.1.1 -e OS,PYTHON -Z -f ./coverage.xml -F pytest -C 8e8581caef937e5cfbae101d44f8c427ca1345d7 -v
2022-10-06T02:43:28.9306113Z [2022-10-06T02:43:28.928Z] ['verbose'] Start of uploader: 1665024208928...
2022-10-06T02:43:28.9311126Z [2022-10-06T02:43:28.930Z] ['info'] 
2022-10-06T02:43:28.9312043Z      _____          _
2022-10-06T02:43:28.9312291Z     / ____|        | |
2022-10-06T02:43:28.9312541Z    | |     ___   __| | ___  ___ _____   __
2022-10-06T02:43:28.9313188Z    | |    / _ \ / _` |/ _ \/ __/ _ \ \ / /
2022-10-06T02:43:28.9313498Z    | |___| (_) | (_| |  __/ (_| (_) \ V /
2022-10-06T02:43:28.9313772Z     \_____\___/ \__,_|\___|\___\___/ \_/
2022-10-06T02:43:28.9313938Z 
2022-10-06T02:43:28.9314075Z   Codecov report uploader 0.3.2
2022-10-06T02:43:28.9371373Z [2022-10-06T02:43:28.936Z] ['info'] => Project root located at: /home/runner/work/VeryGoodBot/VeryGoodBot
2022-10-06T02:43:28.9391170Z [2022-10-06T02:43:28.938Z] ['info'] -> No token specified or token is empty
2022-10-06T02:43:28.9391671Z [2022-10-06T02:43:28.938Z] ['verbose'] Start of network processing...
2022-10-06T02:43:28.9392204Z [2022-10-06T02:43:28.938Z] ['verbose'] Searching for files in /home/runner/work/VeryGoodBot/VeryGoodBot
2022-10-06T02:43:29.0508804Z [2022-10-06T02:43:29.050Z] ['verbose'] Skipping coveragepy, files already specified
2022-10-06T02:43:29.0509658Z [2022-10-06T02:43:29.050Z] ['info'] Searching for coverage files...
2022-10-06T02:43:29.1290006Z [2022-10-06T02:43:29.128Z] ['verbose'] Preparing to clean the following coverage paths: ./coverage.xml
2022-10-06T02:43:29.1295697Z [2022-10-06T02:43:29.129Z] ['info'] => Found 1 possible coverage files:
2022-10-06T02:43:29.1296412Z   ./coverage.xml
2022-10-06T02:43:29.1299914Z [2022-10-06T02:43:29.129Z] ['verbose'] End of network processing
2022-10-06T02:43:29.1303443Z [2022-10-06T02:43:29.130Z] ['info'] Processing ./coverage.xml...
2022-10-06T02:43:29.1363396Z [2022-10-06T02:43:29.136Z] ['info'] Detected GitHub Actions as the CI provider.
2022-10-06T02:43:29.1367368Z [2022-10-06T02:43:29.136Z] ['verbose'] -> Using the following env variables:
2022-10-06T02:43:29.1372951Z [2022-10-06T02:43:29.137Z] ['verbose']      GITHUB_ACTION: __codecov_codecov-action
2022-10-06T02:43:29.1376602Z [2022-10-06T02:43:29.137Z] ['verbose']      GITHUB_HEAD_REF: dependabot/pip/py-cord-speedvoice--2.2.2
2022-10-06T02:43:29.1380236Z [2022-10-06T02:43:29.137Z] ['verbose']      GITHUB_REF: refs/pull/74/merge
2022-10-06T02:43:29.1385333Z [2022-10-06T02:43:29.138Z] ['verbose']      GITHUB_REPOSITORY: BobDotCom/VeryGoodBot
2022-10-06T02:43:29.1388948Z [2022-10-06T02:43:29.138Z] ['verbose']      GITHUB_RUN_ID: 3194134706
2022-10-06T02:43:29.1392263Z [2022-10-06T02:43:29.139Z] ['verbose']      GITHUB_SERVER_URL: https://github.com
2022-10-06T02:43:29.1395816Z [2022-10-06T02:43:29.139Z] ['verbose']      GITHUB_SHA: e42d5d5f585167946667fa6e5707b64fbde17c34
2022-10-06T02:43:29.1400471Z [2022-10-06T02:43:29.139Z] ['verbose']      GITHUB_WORKFLOW: Unit Tests
2022-10-06T02:43:29.1406765Z [2022-10-06T02:43:29.140Z] ['verbose'] Using the following upload parameters:
2022-10-06T02:43:29.1410064Z [2022-10-06T02:43:29.140Z] ['verbose'] branch
2022-10-06T02:43:29.1413371Z [2022-10-06T02:43:29.141Z] ['verbose'] build
2022-10-06T02:43:29.1416426Z [2022-10-06T02:43:29.141Z] ['verbose'] buildURL
2022-10-06T02:43:29.1419697Z [2022-10-06T02:43:29.141Z] ['verbose'] commit
2022-10-06T02:43:29.1423010Z [2022-10-06T02:43:29.142Z] ['verbose'] job
2022-10-06T02:43:29.1426045Z [2022-10-06T02:43:29.142Z] ['verbose'] pr
2022-10-06T02:43:29.1429910Z [2022-10-06T02:43:29.142Z] ['verbose'] service
2022-10-06T02:43:29.1433171Z [2022-10-06T02:43:29.143Z] ['verbose'] slug
2022-10-06T02:43:29.1436104Z [2022-10-06T02:43:29.143Z] ['verbose'] name
2022-10-06T02:43:29.1441534Z [2022-10-06T02:43:29.143Z] ['verbose'] tag
2022-10-06T02:43:29.1444780Z [2022-10-06T02:43:29.144Z] ['verbose'] flags
2022-10-06T02:43:29.1447916Z [2022-10-06T02:43:29.144Z] ['verbose'] parent
2022-10-06T02:43:29.1467447Z [2022-10-06T02:43:29.146Z] ['info'] Pinging Codecov: https://codecov.io/upload/v4?package=github-action-3.1.1-uploader-0.3.2&token=*******&branch=dependabot%2Fpip%2Fpy-cord-speedvoice--2.2.2&build=3194134706&build_url=https%3A%2F%2Fgithub.com%2FBobDotCom%2FVeryGoodBot%2Factions%2Fruns%2F3194134706&commit=8e8581caef937e5cfbae101d44f8c427ca1345d7&job=Unit+Tests&pr=74&service=github-actions&slug=BobDotCom%2FVeryGoodBot&name=codecov-umbrella&tag=&flags=pytest&parent=
2022-10-06T02:43:29.1471631Z [2022-10-06T02:43:29.146Z] ['verbose'] Passed token was 0 characters long
2022-10-06T02:43:29.1475775Z [2022-10-06T02:43:29.147Z] ['verbose'] https://codecov.io/upload/v4?package=github-action-3.1.1-uploader-0.3.2&branch=dependabot%2Fpip%2Fpy-cord-speedvoice--2.2.2&build=3194134706&build_url=https%3A%2F%2Fgithub.com%2FBobDotCom%2FVeryGoodBot%2Factions%2Fruns%2F3194134706&commit=8e8581caef937e5cfbae101d44f8c427ca1345d7&job=Unit+Tests&pr=74&service=github-actions&slug=BobDotCom%2FVeryGoodBot&name=codecov-umbrella&tag=&flags=pytest&parent=
2022-10-06T02:43:29.1476753Z         Content-Type: 'text/plain'
2022-10-06T02:43:29.1477097Z         Content-Encoding: 'gzip'
2022-10-06T02:43:29.1477450Z         X-Reduced-Redundancy: 'false'
2022-10-06T02:43:29.5455183Z [2022-10-06T02:43:29.544Z] ['error'] There was an error running the uploader: Error uploading to https://codecov.io: Error: There was an error fetching the storage URL during POST: 404 - {'detail': ErrorDetail(string='Unable to locate build via Github Actions API. Please upload with the Codecov repository upload token to resolve issue.', code='not_found')}
2022-10-06T02:43:29.5457161Z [2022-10-06T02:43:29.545Z] ['verbose'] The error stack is: Error: Error uploading to https://codecov.io: Error: There was an error fetching the storage URL during POST: 404 - {'detail': ErrorDetail(string='Unable to locate build via Github Actions API. Please upload with the Codecov repository upload token to resolve issue.', code='not_found')}
2022-10-06T02:43:29.5458528Z     at main (/snapshot/repo/dist/src/index.js)
2022-10-06T02:43:29.5459322Z     at processTicksAndRejections (node:internal/process/task_queues:96:5)
2022-10-06T02:43:29.5463176Z [2022-10-06T02:43:29.546Z] ['verbose'] End of uploader: 618 milliseconds
2022-10-06T02:43:29.5578230Z ##[error]Codecov: Failed to properly upload: The process '/home/runner/work/_actions/codecov/codecov-action/v3/dist/codecov' failed with exit code 255

Expected Results

Please provide what you expect to have happened (e.g. a file that has missing coverage on a particular line).
Should upload correctly

Actual Results

Please provide what actually happened.
Doesn’t upload correctly

Additional Information

Any additional information, configuration, or data that might be necessary to reproduce the issue.

@BobDotCom I think you are not specifying

with:
  token: ${{ secrets.CODECOV_TOKEN }}

The logs should reflect that, as in this PR

I am specifying the token.

      - name: Upload code coverage to codecov.io
        uses: codecov/codecov-action@v3
        with:
          token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
          env_vars: OS,PYTHON
          files: ./coverage.xml
          flags: pytest # optional
          name: codecov-umbrella # optional
          fail_ci_if_error: true # optional (default = false)
          verbose: true # optional (default = false)

@BobDotCom maybe I’m looking at the wrong log then, the output you provided shows

2022-10-06T02:43:27.5251284Z ##[group]Run codecov/codecov-action@v3
2022-10-06T02:43:27.5251677Z with:
2022-10-06T02:43:27.5252118Z   env_vars: OS,PYTHON
2022-10-06T02:43:27.5252398Z   files: ./coverage.xml
2022-10-06T02:43:27.5252653Z   flags: pytest
2022-10-06T02:43:27.5252908Z   name: codecov-umbrella
2022-10-06T02:43:27.5253178Z   fail_ci_if_error: true
2022-10-06T02:43:27.5253440Z   verbose: true

Note that token is missing from those lines. I’m wondering if something is just not getting picked up? What happens if you change the name for example to something else? Could you send a log of that?

Config:

      - name: Upload code coverage to codecov.io
        uses: codecov/codecov-action@v3
        with:
          token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
          env_vars: OS,PYTHON
          files: ./coverage.xml
          flags: pytest # optional
          name: updated-name # optional
          fail_ci_if_error: true # optional (default = false)
          verbose: true # optional (default = false)

Logs:

2022-10-06T03:34:42.3121458Z ##[group]Run codecov/codecov-action@v3
2022-10-06T03:34:42.3121774Z with:
2022-10-06T03:34:42.3122019Z   env_vars: OS,PYTHON
2022-10-06T03:34:42.3122290Z   files: ./coverage.xml
2022-10-06T03:34:42.3122556Z   flags: pytest
2022-10-06T03:34:42.3122826Z   name: updated-name
2022-10-06T03:34:42.3123124Z   fail_ci_if_error: true
2022-10-06T03:34:42.3123391Z   verbose: true
2022-10-06T03:34:42.3123616Z env:
2022-10-06T03:34:42.3123856Z   OS: ubuntu-latest
2022-10-06T03:34:42.3124124Z   PYTHON: 3.10
2022-10-06T03:34:42.3124459Z   pythonLocation: /opt/hostedtoolcache/Python/3.10.7/x64
2022-10-06T03:34:42.3124864Z   LD_LIBRARY_PATH: /opt/hostedtoolcache/Python/3.10.7/x64/lib
2022-10-06T03:34:42.3125190Z ##[endgroup]
2022-10-06T03:34:42.5316943Z {
2022-10-06T03:34:42.5317785Z   execArgs: [
2022-10-06T03:34:42.5319974Z     '-n',
2022-10-06T03:34:42.5320859Z     'updated-name',
2022-10-06T03:34:42.5321826Z     '-Q',
2022-10-06T03:34:42.5322313Z     'github-action-3.1.1',
2022-10-06T03:34:42.5322737Z     '-e',
2022-10-06T03:34:42.5323048Z     'OS,PYTHON',
2022-10-06T03:34:42.5323356Z     '-Z',
2022-10-06T03:34:42.5323632Z     '-f',
2022-10-06T03:34:42.5323941Z     './coverage.xml',
2022-10-06T03:34:42.5324234Z     '-F',
2022-10-06T03:34:42.5324513Z     'pytest',
2022-10-06T03:34:42.5324796Z     '-C',
2022-10-06T03:34:42.5325204Z     'c9085c6ad0914b23bbef7805998ae52eb0597b29',
2022-10-06T03:34:42.5325548Z     '-v'
2022-10-06T03:34:42.5325779Z   ]
2022-10-06T03:34:42.5326401Z }
2022-10-06T03:34:42.5334474Z ==> linux OS detected
2022-10-06T03:34:43.0291234Z https://uploader.codecov.io/latest/linux/codecov.SHA256SUM
2022-10-06T03:34:43.0675222Z Received SHA256SUM 20f9c9d78483fce977b6cc39e231a734a23bcd36f4d536bb7355222fb88d02bc  codecov
2022-10-06T03:34:43.0972462Z Received SHA256SUM signature -----BEGIN PGP SIGNATURE-----
2022-10-06T03:34:43.0973332Z 
2022-10-06T03:34:43.0974378Z iQIzBAABCgAdFiEEJwNOf9uFDgu8LGL/gGuyiu13mGkFAmMsvyQACgkQgGuyiu13
2022-10-06T03:34:43.0975118Z mGmStA/+N4roe/N6hA78uO55SL8/8tfS75QYe+PbRF3nN+mpXsyik+gMZWfu9SLT
2022-10-06T03:34:43.0975799Z lQJK2T9PfU6dFx5VnceoENXgnH+SUvDLorKUOwTolXMIEos9bLCPRcgfe3AkTeZR
2022-10-06T03:34:43.0976471Z 2sHZcDj75nmcfEpO9Tf/Jpq2PPrP24J3S822/v3ZT8lca9jJe8CJlBL15yXC1kgD
2022-10-06T03:34:43.0977103Z Vk72+r9KzAoAu6bCEvBOOIFHHNfVBf0635vamRFCHFgjN1rRJW5cuyieZr9rYa22
2022-10-06T03:34:43.0977847Z 1KDpN6vijJwUlrwB7V8wTvaeOEinR5Fzo55TtjTtE4brfaOF2KCzM33Czzep3SfH
2022-10-06T03:34:43.0978552Z OPJENE1+A+/bleRcVok5qmRfvMThSITE98INNk4qCVsB1YqTOvtJs5rFtyuH/Xqf
2022-10-06T03:34:43.0979561Z 674HAqeNjzXvFME5oX4Hm31X1Y4rfzH0738H25J//3GqZWahivq7e8ElyYP+CI0H
2022-10-06T03:34:43.0980214Z pXbeN6E9Zup/QR6YjYWBV35AvRscC7v4e6HnlN9ctTuAd0VZJXI8JLM1XTgiQnIQ
2022-10-06T03:34:43.0980943Z rql/7lIYrvzLerPmzVoAmYZuV2iAE7pxfo3Iy9zEtgV8cF42peE3TDyrqj5Ylbtc
2022-10-06T03:34:43.0982471Z 1pKlfIIAhoB/ff2hIvGonXG4OgTCCQrUvbtI8KsNi6UFPX5jhCaltKMsLG/JPM+Q
2022-10-06T03:34:43.0983171Z vXPa43eZ+aWPHOi9dFdlg98GCFesSVKLECkU4DjoZxJsI493PrQ=
2022-10-06T03:34:43.0983656Z =IHR5
2022-10-06T03:34:43.0984450Z -----END PGP SIGNATURE-----
2022-10-06T03:34:43.0984699Z 
2022-10-06T03:34:43.1363449Z ==> SHASUM file signed by key id 806bb28aed779869
2022-10-06T03:34:43.4024417Z ==> Uploader SHASUM verified (20f9c9d78483fce977b6cc39e231a734a23bcd36f4d536bb7355222fb88d02bc  codecov)
2022-10-06T03:34:43.4029322Z ==> Running version latest
2022-10-06T03:34:43.4600535Z ==> Running version v0.3.2
2022-10-06T03:34:43.4630596Z [command]/home/runner/work/_actions/codecov/codecov-action/v3/dist/codecov -n updated-name -Q github-action-3.1.1 -e OS,PYTHON -Z -f ./coverage.xml -F pytest -C c9085c6ad0914b23bbef7805998ae52eb0597b29 -v
2022-10-06T03:34:43.7381491Z [2022-10-06T03:34:43.735Z] ['verbose'] Start of uploader: 1665027283735...
2022-10-06T03:34:43.7391018Z [2022-10-06T03:34:43.737Z] ['info'] 
2022-10-06T03:34:43.7391724Z      _____          _
2022-10-06T03:34:43.7394896Z     / ____|        | |
2022-10-06T03:34:43.7395445Z    | |     ___   __| | ___  ___ _____   __
2022-10-06T03:34:43.7396745Z    | |    / _ \ / _` |/ _ \/ __/ _ \ \ / /
2022-10-06T03:34:43.7397086Z    | |___| (_) | (_| |  __/ (_| (_) \ V /
2022-10-06T03:34:43.7397398Z     \_____\___/ \__,_|\___|\___\___/ \_/
2022-10-06T03:34:43.7397582Z 
2022-10-06T03:34:43.7397732Z   Codecov report uploader 0.3.2
2022-10-06T03:34:43.7451619Z [2022-10-06T03:34:43.744Z] ['info'] => Project root located at: /home/runner/work/VeryGoodBot/VeryGoodBot
2022-10-06T03:34:43.7469213Z [2022-10-06T03:34:43.746Z] ['info'] -> No token specified or token is empty
2022-10-06T03:34:43.7470170Z [2022-10-06T03:34:43.746Z] ['verbose'] Start of network processing...
2022-10-06T03:34:43.7470896Z [2022-10-06T03:34:43.746Z] ['verbose'] Searching for files in /home/runner/work/VeryGoodBot/VeryGoodBot
2022-10-06T03:34:43.8883158Z [2022-10-06T03:34:43.887Z] ['verbose'] Skipping coveragepy, files already specified
2022-10-06T03:34:43.8883906Z [2022-10-06T03:34:43.887Z] ['info'] Searching for coverage files...
2022-10-06T03:34:43.9701023Z [2022-10-06T03:34:43.969Z] ['verbose'] Preparing to clean the following coverage paths: ./coverage.xml
2022-10-06T03:34:43.9703393Z [2022-10-06T03:34:43.969Z] ['info'] => Found 1 possible coverage files:
2022-10-06T03:34:43.9704011Z   ./coverage.xml
2022-10-06T03:34:43.9704558Z [2022-10-06T03:34:43.969Z] ['verbose'] End of network processing
2022-10-06T03:34:43.9705134Z [2022-10-06T03:34:43.969Z] ['info'] Processing ./coverage.xml...
2022-10-06T03:34:43.9748007Z [2022-10-06T03:34:43.974Z] ['info'] Detected GitHub Actions as the CI provider.
2022-10-06T03:34:43.9749028Z [2022-10-06T03:34:43.974Z] ['verbose'] -> Using the following env variables:
2022-10-06T03:34:43.9752999Z [2022-10-06T03:34:43.974Z] ['verbose']      GITHUB_ACTION: __codecov_codecov-action
2022-10-06T03:34:43.9753805Z [2022-10-06T03:34:43.974Z] ['verbose']      GITHUB_HEAD_REF: dependabot/pip/py-cord-speedvoice--2.2.2
2022-10-06T03:34:43.9754495Z [2022-10-06T03:34:43.974Z] ['verbose']      GITHUB_REF: refs/pull/74/merge
2022-10-06T03:34:43.9755152Z [2022-10-06T03:34:43.974Z] ['verbose']      GITHUB_REPOSITORY: BobDotCom/VeryGoodBot
2022-10-06T03:34:43.9757886Z [2022-10-06T03:34:43.974Z] ['verbose']      GITHUB_RUN_ID: 3194331675
2022-10-06T03:34:43.9758579Z [2022-10-06T03:34:43.974Z] ['verbose']      GITHUB_SERVER_URL: https://github.com
2022-10-06T03:34:43.9759282Z [2022-10-06T03:34:43.974Z] ['verbose']      GITHUB_SHA: 4b9fa9959cbc4bb954219ce0b87f85d81820d122
2022-10-06T03:34:43.9759917Z [2022-10-06T03:34:43.974Z] ['verbose']      GITHUB_WORKFLOW: Unit Tests
2022-10-06T03:34:43.9760614Z [2022-10-06T03:34:43.975Z] ['verbose'] Using the following upload parameters:
2022-10-06T03:34:43.9761220Z [2022-10-06T03:34:43.975Z] ['verbose'] branch
2022-10-06T03:34:43.9764476Z [2022-10-06T03:34:43.975Z] ['verbose'] build
2022-10-06T03:34:43.9765201Z [2022-10-06T03:34:43.975Z] ['verbose'] buildURL
2022-10-06T03:34:43.9765718Z [2022-10-06T03:34:43.975Z] ['verbose'] commit
2022-10-06T03:34:43.9767232Z [2022-10-06T03:34:43.975Z] ['verbose'] job
2022-10-06T03:34:43.9767713Z [2022-10-06T03:34:43.975Z] ['verbose'] pr
2022-10-06T03:34:43.9768216Z [2022-10-06T03:34:43.975Z] ['verbose'] service
2022-10-06T03:34:43.9768696Z [2022-10-06T03:34:43.975Z] ['verbose'] slug
2022-10-06T03:34:43.9769189Z [2022-10-06T03:34:43.975Z] ['verbose'] name
2022-10-06T03:34:43.9771687Z [2022-10-06T03:34:43.975Z] ['verbose'] tag
2022-10-06T03:34:43.9772219Z [2022-10-06T03:34:43.975Z] ['verbose'] flags
2022-10-06T03:34:43.9772720Z [2022-10-06T03:34:43.975Z] ['verbose'] parent
2022-10-06T03:34:43.9774461Z [2022-10-06T03:34:43.976Z] ['info'] Pinging Codecov: https://codecov.io/upload/v4?package=github-action-3.1.1-uploader-0.3.2&token=*******&branch=dependabot%2Fpip%2Fpy-cord-speedvoice--2.2.2&build=3194331675&build_url=https%3A%2F%2Fgithub.com%2FBobDotCom%2FVeryGoodBot%2Factions%2Fruns%2F3194331675&commit=c9085c6ad0914b23bbef7805998ae52eb0597b29&job=Unit+Tests&pr=74&service=github-actions&slug=BobDotCom%2FVeryGoodBot&name=updated-name&tag=&flags=pytest&parent=
2022-10-06T03:34:43.9775980Z [2022-10-06T03:34:43.976Z] ['verbose'] Passed token was 0 characters long
2022-10-06T03:34:43.9777721Z [2022-10-06T03:34:43.976Z] ['verbose'] https://codecov.io/upload/v4?package=github-action-3.1.1-uploader-0.3.2&branch=dependabot%2Fpip%2Fpy-cord-speedvoice--2.2.2&build=3194331675&build_url=https%3A%2F%2Fgithub.com%2FBobDotCom%2FVeryGoodBot%2Factions%2Fruns%2F3194331675&commit=c9085c6ad0914b23bbef7805998ae52eb0597b29&job=Unit+Tests&pr=74&service=github-actions&slug=BobDotCom%2FVeryGoodBot&name=updated-name&tag=&flags=pytest&parent=
2022-10-06T03:34:43.9779595Z         Content-Type: 'text/plain'
2022-10-06T03:34:43.9780006Z         Content-Encoding: 'gzip'
2022-10-06T03:34:43.9780422Z         X-Reduced-Redundancy: 'false'
2022-10-06T03:34:44.9113527Z [2022-10-06T03:34:44.909Z] ['error'] There was an error running the uploader: Error uploading to https://codecov.io: Error: There was an error fetching the storage URL during POST: 404 - {'detail': ErrorDetail(string='Unable to locate build via Github Actions API. Please upload with the Codecov repository upload token to resolve issue.', code='not_found')}
2022-10-06T03:34:44.9116727Z [2022-10-06T03:34:44.910Z] ['verbose'] The error stack is: Error: Error uploading to https://codecov.io: Error: There was an error fetching the storage URL during POST: 404 - {'detail': ErrorDetail(string='Unable to locate build via Github Actions API. Please upload with the Codecov repository upload token to resolve issue.', code='not_found')}
2022-10-06T03:34:44.9118029Z     at main (/snapshot/repo/dist/src/index.js)
2022-10-06T03:34:44.9119151Z     at processTicksAndRejections (node:internal/process/task_queues:96:5)
2022-10-06T03:34:44.9120101Z [2022-10-06T03:34:44.910Z] ['verbose'] End of uploader: 1175 milliseconds
2022-10-06T03:34:44.9238677Z ##[error]Codecov: Failed to properly upload: The process '/home/runner/work/_actions/codecov/codecov-action/v3/dist/codecov' failed with exit code 255

this is extremely confusing. could it be that dependabot doesn’t have access to that secret? does this happen if you open a PR?

maybe this might help? Managing encrypted secrets for Dependabot - GitHub Docs

I actually realized that was a possibility just before I saw your answer.

The error is occurring in a dependabot PR. When I merge changes from master into the PR manually, codecov uploads just fine. However when I run @dependabot rebase or @dependabot recreate, the error occurs. So it seems that the issue is that dependabot can’t access the secret. After adding CODECOV_TOKEN to the dependabot secrets, the uploader ran correctly.

Considering how deep I went in this rabbit hole without any clear hints as to what was wrong, maybe a note about dependabot with private repos should be added to the docs? That way if anyone has this issue in the future it’ll be much clearer as to why and how to fix it.

1 Like

Oh 100%, I’ve worked at Codecov long enough to know about most of the “weirdness” that might happen, but this stumped me. I’m glad we were able to find a solution, and I’ll be updating our docs in the morning.

1 Like

Hello Tom, I read whole discussion but I am unable to find “what is the final solution?” I will be very glad if you reply and solving my query.

@MohitKumar020291 you will need to give Dependabot access to the secret following the instructions here. The secret is the CODECOV_TOKEN found in the settings page on your repository in Codecov.