Merge branch 'main' into feat-cloud-provider-authn

.github/workflows/test.yml

@@ -26,4 +26,12 @@ jobs:
         with:
           token: ${{ secrets.TC_CLOUD_TOKEN }}
       - name: go test
-        run: go test ./...
+        run: go test -v ./... -coverprofile=coverage.out -covermode=atomic
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          file: ./coverage.out
+          flags: unittests
+          name: codecov-umbrella
+          fail_ci_if_error: true
+          token: ${{ secrets.CODECOV_TOKEN }}

README.md

@@ -1,6 +1,8 @@
 # attest
 library to create, verify, and evaluate policy for attestations on container images
 
+[![codecov](https://codecov.io/gh/docker/attest/graph/badge.svg?token=cGT0f1ACKg)](https://codecov.io/gh/docker/attest)
+
 # usage
 ## signing and verifying attestations
 See [example_sign_test.go](./pkg/attest/example_sign_test.go)