Codecov Integration
Code coverage trends, test health metrics, and quality gate patterns.
Overview
Analyze code coverage trends and test health metrics to understand engineering quality practices. Corvana tracks coverage patterns over time to identify areas of declining test investment.
Prerequisites
- Codecov admin or owner access to authorize the OAuth connection
- A Corvana Assess account with an active assessment engagement
OAuth Scopes
Corvana requests the minimum necessary permissions — always read-only. The following scopes are requested during the OAuth authorization flow:
| Scope | Access Level |
|---|---|
read | Read-only |
Data We Collect
Corvana collects only structural metadata — never content, PII, or sensitive data. The following data points are analyzed:
- Coverage percentage trends
- File-level coverage changes
- PR coverage impact
- Branch coverage comparison
- Test suite health metrics
Data We Never Collect
To protect your privacy and security, the following data is explicitly excluded from collection:
- Never: Source code
- Never: Test file content
- Never: CI credentials
- Never: Repository secrets
- Never: Developer emails
Setup Steps
Step 1: Navigate to Integrations
From your Corvana Assess dashboard, open the left sidebar and click Integrations.
Step 2: Connect Codecov
Find the Codecov card and click Connect Codecov. This initiates the OAuth flow.
Step 3: Authorize Access
Review the requested permissions on Codecov's authorization page and click Allow. Corvana requests read-only access only.
Step 4: Verify Connection
Return to the Corvana dashboard. The Codecov card should now show "Connected" with a green indicator. Data collection begins within minutes.
Disconnecting
You can disconnect Codecov at any time from the Integrations dashboard. Click the connected Codecov card and select Disconnect. All collected metadata is permanently deleted within 24 hours. You can also revoke access directly from Codecov's admin panel.
Troubleshooting
The Codecov connection shows "Disconnected"
Try reconnecting from the Integrations dashboard. If the issue persists, check that your Codecov admin has not revoked the OAuth authorization.
I don't see any data after connecting
Data collection typically begins within 5-10 minutes. If no data appears after 30 minutes, check your connection status and ensure the account has the required permissions.