Sign bundle manifest excluding certain fields and add the signature as an annotation #22273

	name: Test coverage
	on:
	push:
	tags:
	- v*
	branches:
	- main
	pull_request:
	paths-ignore:
	- 'release/**'

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version: '1.21'
	check-latest: true
	cache: true
	- name: Run go test with coverage
	run: COVER_PROFILE=coverage.txt make coverage-unit-test
	- name: Codecov upload
	uses: codecov/[email protected]
	with:
	files: ./coverage.txt
	token: ${{ secrets.CODECOV_TOKEN }}

Provide feedback