publish code coverage on release build

.github/workflows/release.yml

@@ -1,6 +1,9 @@
 name: Release
 
-on: push
+on:
+  push:
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
 
 jobs:
   build:
@@ -9,12 +12,32 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Extract release info from CHANGELOG
-        if: startsWith(github.ref, 'refs/tags/')
         run: grep $(date +%Y-%m-%d) -A 250 CHANGELOG.md | tail -n +3 | sed '1,/===================/!d' | head -n -3 > release.txt
       - name: Release
         uses: softprops/action-gh-release@v1
-        if: startsWith(github.ref, 'refs/tags/')
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           body_path: release.txt
+  code-coverage:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Install stable toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: stable
+          override: true
+      - name: Run cargo-tarpaulin
+        uses: actions-rs/tarpaulin@v0.1
+        with:
+          version: '0.18.0'
+          out-type: Lcov
+          timeout: 600
+          args: '--all -e tests -- --test-threads 1'
+      - name: Coveralls Finished
+        uses: coverallsapp/github-action@master
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          path-to-lcov: ./lcov.info

kube/src/client/auth/mod.rs

@@ -213,7 +213,7 @@ fn token_from_gcp_provider(provider: &AuthProviderConfig) -> Result<ProviderToke
 
         if !output.status.success() {
             return Err(ConfigError::AuthExecRun {
-                cmd: format! {"{} {}", cmd, params},
+                cmd: format!("{} {}", cmd, params),
                 status: output.status,
                 out: output,
             }