Fix coverage artifact naming, job mismatch, and OIDC permissions in base workflows

.github/workflows/_test-unit-base.yml

@@ -27,6 +27,10 @@ on:
         required: false
         type: number
         default: 10
+      artifact-name:
+        description: "Unique name for the coverage artifact (must be unique per run)"
+        required: true
+        type: string
 
 permissions:
   contents: read
@@ -102,7 +106,7 @@ jobs:
         if: always()
         uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
-          name: coverage-${{ github.run_id }}-${{ github.run_attempt }}
+          name: coverage-${{ inputs.artifact-name }}-${{ github.run_id }}-${{ github.run_attempt }}
           path: coverage.xml
           retention-days: 1
 
@@ -123,7 +127,7 @@ jobs:
       - name: Download coverage report
         uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
-          pattern: coverage-${{ github.run_id }}-${{ github.run_attempt }}
+          pattern: coverage-${{ inputs.artifact-name }}-${{ github.run_id }}-${{ github.run_attempt }}
           path: coverage-reports
           merge-multiple: true
 

.github/workflows/_test-unit-services-base.yml

@@ -194,7 +194,7 @@ jobs:
       - name: Download coverage report
         uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
-          pattern: coverage-${{ github.job }}-${{ github.run_id }}-${{ github.run_attempt }}
+          pattern: coverage-run-${{ github.run_id }}-${{ github.run_attempt }}
           path: coverage-reports
           merge-multiple: true
 

.github/workflows/test-unit-caching-redis.yml

@@ -8,6 +8,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/test-unit-core-utils.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -18,3 +20,4 @@ jobs:
       test-path: "tests/test_litellm/litellm_core_utils"
       workers: 2
       reruns: 1
+      artifact-name: core-utils

.github/workflows/test-unit-enterprise-routing.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -22,3 +24,4 @@ jobs:
         tests/test_litellm/router_strategy
       workers: 2
       reruns: 2
+      artifact-name: enterprise-routing

.github/workflows/test-unit-integrations.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -18,3 +20,4 @@ jobs:
       test-path: "tests/test_litellm/integrations"
       workers: 2
       reruns: 3
+      artifact-name: integrations

.github/workflows/test-unit-llm-providers.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -19,6 +21,7 @@ jobs:
       test-path: "tests/test_litellm/llms/vertex_ai"
       workers: 1
       reruns: 2
+      artifact-name: llm-vertex-ai
 
   other-providers:
     name: All Other Providers
@@ -27,3 +30,4 @@ jobs:
       test-path: "tests/test_litellm/llms --ignore=tests/test_litellm/llms/vertex_ai"
       workers: 2
       reruns: 2
+      artifact-name: llm-other-providers

.github/workflows/test-unit-misc.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -29,3 +31,4 @@ jobs:
         tests/test_litellm/test_*.py
       workers: 2
       reruns: 2
+      artifact-name: misc

.github/workflows/test-unit-proxy-auth.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -18,3 +20,4 @@ jobs:
       test-path: "tests/test_litellm/proxy/auth tests/test_litellm/proxy/hooks tests/test_litellm/proxy/policy_engine tests/test_litellm/proxy/client"
       workers: 2
       reruns: 2
+      artifact-name: proxy-auth

.github/workflows/test-unit-proxy-db.yml

@@ -7,6 +7,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/test-unit-proxy-endpoints.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -33,3 +35,4 @@ jobs:
         tests/test_litellm/proxy/ui_crud_endpoints
       workers: 2
       reruns: 2
+      artifact-name: proxy-endpoints

.github/workflows/test-unit-proxy-infra.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -26,3 +28,4 @@ jobs:
         tests/test_litellm/proxy/test_*.py
       workers: 2
       reruns: 2
+      artifact-name: proxy-infra

.github/workflows/test-unit-responses-caching-types.yml

@@ -6,6 +6,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -18,3 +20,4 @@ jobs:
       test-path: "tests/test_litellm/responses tests/test_litellm/caching tests/test_litellm/types"
       workers: 2
       reruns: 2
+      artifact-name: responses-caching-types

.github/workflows/test-unit-security.yml

@@ -7,6 +7,8 @@ on:
 
 permissions:
   contents: read
+  id-token: write
+  pull-requests: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}