Merge pull request #50 from jeromekelleher/add-zizmor-part-2

Declare CODECOV_TOKEN as a named workflow_call secret

Author: jeromekelleher

.github/workflows/c-tests.yml

@@ -12,6 +12,13 @@ on:
         description: 'Directory to find the C library'
         required: true
         type: string
+    secrets:
+      CODECOV_TOKEN:
+        # This first-party tskit-dev reusable workflow consumes
+        # secrets.CODECOV_TOKEN; declaring it as a named workflow_call secret
+        # lets callers pass it explicitly instead of `secrets: inherit`.
+        # Required because the codecov step uses fail_ci_if_error: true.
+        required: true
 
 permissions:
   contents: read

.github/workflows/python-c-tests.yml

@@ -18,6 +18,13 @@ on:
         required: false
         type: string
         default: 'tests/test_python_c.py'
+    secrets:
+      CODECOV_TOKEN:
+        # This first-party tskit-dev reusable workflow consumes
+        # secrets.CODECOV_TOKEN; declaring it as a named workflow_call secret
+        # lets callers pass it explicitly instead of `secrets: inherit`.
+        # Required because the codecov step uses fail_ci_if_error: true.
+        required: true
 
 permissions:
   contents: read

.github/workflows/python-tests.yml

@@ -25,6 +25,13 @@ on:
         required: false
         type: string
         default: "false"
+    secrets:
+      CODECOV_TOKEN:
+        # This first-party tskit-dev reusable workflow consumes
+        # secrets.CODECOV_TOKEN; declaring it as a named workflow_call secret
+        # lets callers pass it explicitly instead of `secrets: inherit`.
+        # Required because the codecov step uses fail_ci_if_error: true.
+        required: true
 
 permissions:
   contents: read