Bump step-security/harden-runner from 2.10.1 to 2.10.2 #407

	name: CodeCov

	on:
	push:
	pull_request:
	types: [opened, synchronize, reopened]

	permissions:
	contents: read

	jobs:
	codecov:
	name: Build
	runs-on: ubuntu-latest
	env:
	BUILD_DIR: build_codecov
	GCC_VERSION: 12

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
	with:
	egress-policy: audit

	- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
	with:
	submodules: 'True'

	- name: Install Dependencies
	run: \|
	sudo apt-get update
	sudo apt-get install -y cmake "g++-$GCC_VERSION" lcov ninja-build

	- name: Configure Build
	run: \|
	mkdir "$BUILD_DIR"
	cmake \
	-G Ninja \
	-S . \
	-B "$BUILD_DIR" \
	-D MIDI2_COVERAGE=Yes \
	-D CMAKE_C_COMPILER="gcc-$GCC_VERSION" \
	-D CMAKE_CXX_COMPILER="g++-$GCC_VERSION"

	- name: Build
	run: cmake --build "$BUILD_DIR"

	- name: Run the Test Binaries
	run: \|
	ctest \
	--test-dir "$BUILD_DIR" \
	--output-junit junit.xml \
	--verbose

	- name: Collect the Coverage
	run: \|
	set -x
	lcov \
	--capture \
	--output-file coverage.info \
	--directory "$BUILD_DIR" \
	--gcov-tool "gcov-$GCC_VERSION"

	- name: Upload coverage reports to Codecov
	uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
	env:
	CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

	- name: Upload test results to Codecov
	if: ${{ !cancelled() }}
	uses: codecov/test-results-action@9739113ad922ea0a9abb4b2c0f8bf6a4aa8ef820 #v1.0.1
	with:
	token: ${{ secrets.CODECOV_TOKEN }}

Provide feedback