feat: add code coverage to sanctions

.coveragerc

@@ -2,11 +2,15 @@
 branch = True
 data_file = .coverage
 source=sanctions
+relative_files = True
 omit =
+    CODEOWNERS
     sanctions/settings/*
     sanctions/conf/*
     *wsgi.py
-    */migrations/*
+    *migrations*
     *admin.py
-    */static/*
-    */templates/*
+    *static*
+    *templates*
+    *test*
+    *gunicorn_configuration.py

.github/workflows/ci.yml

@@ -17,6 +17,14 @@ jobs:
         os: [ubuntu-20.04]
         python-version: ['3.8']
         toxenv: ["py38", "quality", "docs", "pii_check"]
+    permissions:
+      # Gives the action the necessary permissions for publishing new
+      # comments in pull requests.
+      pull-requests: write
+      # Gives the action the necessary permissions for pushing data to the
+      # python-coverage-comment-action branch, and for editing existing
+      # comments (to avoid publishing multiple comments in the same PR)
+      contents: write
 
     steps:
       - uses: actions/checkout@v3
@@ -36,9 +44,12 @@ jobs:
           TOXENV: ${{ matrix.toxenv }}
         run: tox
 
-      # - name: Run coverage
-      #   if: matrix.python-version == '3.8' && matrix.toxenv == 'py38'
-      #   uses: codecov/codecov-action@v3
-      #   with:
-      #     flags: unittests
-      #     fail_ci_if_error: true
+      - name: Run coverage
+        if: matrix.python-version == '3.8' && matrix.toxenv == 'py38'
+        uses: py-cov-action/python-coverage-comment-action@v3
+        with:
+          GITHUB_TOKEN: ${{ github.token }}
+          MINIMUM_GREEN: 90
+          MINIMUM_ORANGE: 80
+          ANNOTATE_MISSING_LINES: true
+          ANNOTATION_TYPE: error

requirements/ci.in

@@ -4,3 +4,4 @@
 
 tox                       # Virtualenv management for tests
 tox-battery               # Makes tox aware of requirements file changes
+coverage

requirements/ci.txt

@@ -4,27 +4,35 @@
 #
 #    make upgrade
 #
+coverage==7.3.2
+    # via -r requirements/ci.in
 distlib==0.3.7
     # via virtualenv
 filelock==3.13.1
     # via
     #   tox
     #   virtualenv
 packaging==23.2
-    # via tox
+    # via
+    #   pyproject-api
+    #   tox
 platformdirs==3.11.0
-    # via virtualenv
+    # via
+    #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
+    #   tox
+    #   virtualenv
 pluggy==1.3.0
     # via tox
 py==1.11.0
     # via tox
 six==1.16.0
     # via tox
 tomli==2.0.1
-    # via tox
+    # via
+    #   pyproject-api
+    #   tox
 tox==3.28.0
     # via
-    #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/ci.in
     #   tox-battery
 tox-battery==0.6.2