Add Codecov and CI workflow

mowens3 · claude · mowens3 · commit a03f27b70602 · 2026-01-07T15:22:45.000-08:00
- GitHub Actions workflow for PHP 8.1/8.2/8.3 matrix
- PHPUnit with PCOV coverage
- Codecov integration with coverage upload
- PHPStan static analysis
- README badges for CI, coverage, version, license

Co-Authored-By: Claude Opus 4.5 &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -0,0 +1,67 @@
+name: CI
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+    branches: [master, main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        php: ['8.1', '8.2', '8.3']
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php }}
+          extensions: mbstring, json
+          coverage: pcov
+
+      - name: Get Composer cache directory
+        id: composer-cache
+        run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
+
+      - name: Cache Composer dependencies
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ runner.os }}-php-${{ matrix.php }}-${{ hashFiles('**/composer.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-php-${{ matrix.php }}-
+
+      - name: Install dependencies
+        run: composer install --prefer-dist --no-progress
+
+      - name: Run tests with coverage
+        run: vendor/bin/phpunit --coverage-clover coverage.xml
+
+      - name: Upload coverage to Codecov
+        if: matrix.php == '8.3'
+        uses: codecov/codecov-action@v4
+        with:
+          files: coverage.xml
+          fail_ci_if_error: false
+          token: ${{ secrets.CODECOV_TOKEN }}
+
+  static-analysis:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.3'
+
+      - name: Install dependencies
+        run: composer install --prefer-dist --no-progress
+
+      - name: Run PHPStan
+        run: vendor/bin/phpstan analyse src --level=5
diff --git a/.gitignore b/.gitignore
@@ -2,3 +2,5 @@
 /.phpunit.cache/
 composer.lock
 .phpunit.result.cache
+coverage.xml
+/coverage-html/
diff --git a/README.md b/README.md
@@ -1,5 +1,10 @@
 # MCP HTTP Security
 
+[![CI](https://github.com/code-wheel/mcp-http-security/actions/workflows/ci.yml/badge.svg)](https://github.com/code-wheel/mcp-http-security/actions/workflows/ci.yml)
+[![codecov](https://codecov.io/gh/code-wheel/mcp-http-security/graph/badge.svg)](https://codecov.io/gh/code-wheel/mcp-http-security)
+[![Latest Stable Version](https://poser.pugx.org/code-wheel/mcp-http-security/v)](https://packagist.org/packages/code-wheel/mcp-http-security)
+[![License](https://poser.pugx.org/code-wheel/mcp-http-security/license)](https://packagist.org/packages/code-wheel/mcp-http-security)
+
 Secure HTTP transport wrapper for MCP (Model Context Protocol) servers in PHP.
 
 Provides production-ready security components that don't exist elsewhere in the PHP MCP ecosystem:
diff --git a/codecov.yml b/codecov.yml
@@ -0,0 +1,30 @@
+codecov:
+  require_ci_to_pass: yes
+
+coverage:
+  precision: 2
+  round: down
+  range: "70...100"
+
+  status:
+    project:
+      default:
+        target: auto
+        threshold: 2%
+    patch:
+      default:
+        target: auto
+        threshold: 2%
+
+parsers:
+  gcov:
+    branch_detection:
+      conditional: yes
+      loop: yes
+      method: no
+      macro: no
+
+comment:
+  layout: "reach,diff,flags,files"
+  behavior: default
+  require_changes: no
diff --git a/phpunit.xml b/phpunit.xml
@@ -21,4 +21,11 @@
             <directory suffix=".php">src</directory>
         </include>
     </source>
+
+    <coverage>
+        <report>
+            <clover outputFile="coverage.xml"/>
+            <html outputDirectory="coverage-html"/>
+        </report>
+    </coverage>
 </phpunit>
