What the developer wrote
Authored by Tobin C. Harding
Remove coveralls
We added this a while back hoping it would improve the repo but
neither myself nor Andrew ever look at the output before ack'ing or
merging and the notification is annoying. I personally have not seen
any dev or reviewer comment on it leading to better test coverage. On
top of that we have a mutation testing bot that runs on the stable
crates.
So, while a good intention, it seems coveralls is not adding any value
to the restore at this stage - remove it.
What changed, and why it matters
This commit removes the Coveralls code-coverage reporting workflow from the repository. It deletes the GitHub Actions file that ran test coverage on every push and pull request, and updates the workflow list in the README. There is no change to the actual Bitcoin library code, its tests, or its security behavior.
No security action required. If the project wants to retain visibility into coverage trends, consider archiving historical reports or replacing Coveralls with an alternative coverage service; this is a project-management decision, not a security fix.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff deletes .github/workflows/coveralls.yml and removes the corresponding Coveralls entry from .github/workflows/README.md. The workflow previously ran cargo llvm-cov with –all-features –workspace and uploaded an LCOV report to coverallsapp/github-action@v2. No source code, dependencies, cryptographic logic, or CI secrets are modified.
Changed components
.github/workflows/coveralls.yml.github/workflows/README.mdInspect captured patch +3 / −28
diff --git a/.github/workflows/README.md b/.github/workflows/README.md
index 5dd3aeb8..d46aafc5 100644
--- a/.github/workflows/README.md
+++ b/.github/workflows/README.md
@@ -29,7 +29,6 @@ Run from rust.yml unless stated otherwise. Unfortunately we are now exceeding th
15. `WASM`
16. `Kani`
17. `API`
-18. `Coveralls` - run by `coveralls.yml`
-19. `release` - run by `release.yml`
-20. `labeler` - run by `manage-pr.yml`
-21. `Shellcheck` - run by `shellcheck.yml`
+18. `release` - run by `release.yml`
+19. `labeler` - run by `manage-pr.yml`
+20. `Shellcheck` - run by `shellcheck.yml`
diff --git a/.github/workflows/coveralls.yml b/.github/workflows/coveralls.yml
deleted file mode 100644
index 688481ef..00000000
--- a/.github/workflows/coveralls.yml
+++ /dev/null
@@ -1,24 +0,0 @@
-on:
- - push
- - pull_request
-
-name: Code coverage with llvm-cov
-
-jobs:
- Coveralls:
- name: Code coverage - stable toolchain
- runs-on: ubuntu-24.04
- strategy:
- fail-fast: false
- steps:
- - name: Checkout Crate
- uses: actions/checkout@v4
- - name: Checkout Toolchain
- # https://github.com/dtolnay/rust-toolchain
- uses: dtolnay/rust-toolchain@stable
- - name: Install cargo-llvm-cov
- uses: taiki-e/install-action@cargo-llvm-cov
- - name: Generate code coverage for tests
- run: cargo llvm-cov --ignore-filename-regex fuzz --all-features --workspace --lcov --output-path lcov.info
- - name: Upload report to coveralls
- uses: coverallsapp/github-action@v2
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.