- Upload raw surefire/failsafe XML as build artifacts (always run).
- Publish a JUnit check run + job summary that surfaces tests which only
passed after a rerun (flakes), which the rerunFailingTestsCount flags
otherwise hide.
- Copy mikepenz/action-junit-report (v6, 3a81627) as a local action at
.github/actions/junit-report to satisfy the verified-actions-only
policy.
- Add the checks/pull-requests permissions the reporter needs.
Non-blocking: fail_on_failure:false + continue-on-error, so flakes
become visible without changing what fails the build.
alerman