Add Datadog code coverage upload

[ManuelPalenzuelaDD]

Summary

We're migrating code coverage reporting from Codecov to Datadog Code Coverage across DataDog repositories. This PR adds Datadog coverage uploads alongside the existing Codecov setup — nothing is removed or changed about your current workflow.

What this PR does

• Adds a datadog-ci coverage upload step to the "appsec code coverage" GitLab CI job, right after the existing Codecov uploads
• Both LCOV reports (appsec-extension and appsec-helper) are uploaded to Datadog in addition to Codecov
• Adds a code-coverage.datadog.yml config file that mirrors your existing codecov.yml ignore paths and PR gate thresholds

What this means for you

• No changes to your existing workflow — Codecov continues to work exactly as before
• No CI breakage risk — the Datadog upload is wrapped with || true and continue-on-error so it can never fail your pipeline
• No action needed — once merged, coverage data will start flowing into Datadog automatically

Once we've validated that Datadog coverage numbers match Codecov, we'll follow up with a separate PR to remove the Codecov integration.

Changes

File	Change
.gitlab/generate-appsec.php	Added Datadog coverage upload step after existing Codecov uploads
code-coverage.datadog.yml	New config mirroring codecov.yml ignore paths and thresholds

If you have any questions about this migration, feel free to ask!

🤖 Generated with Claude Code

[datadog-prod-us1-6]

⚠️ Tests

✨ Fix all issues with BitsAI or with Cursor

⚠️ Warnings

🧪 13 Tests failed

testSearchPhpBinaries from integration.DDTrace\Tests\Integration\PHPInstallerTest     (Fix with Cursor)

DDTrace\Tests\Integration\PHPInstallerTest::testSearchPhpBinaries
Test code or tested code printed unexpected output: Searching for available php binaries, this operation might take a while.

testSimplePushAndProcess from laravel-58-test.DDTrace\Tests\Integrations\Laravel\V5_8\QueueTest     (Fix with Cursor)

Risky Test
phpvfscomposer://tests/vendor/phpunit/phpunit/phpunit:60

testSimplePushAndProcess from laravel-8x-test.DDTrace\Tests\Integrations\Laravel\V8_x\QueueTest     (Fix with Cursor)

DDTrace\Tests\Integrations\Laravel\V8_x\QueueTest::testSimplePushAndProcess
Test code or tested code printed unexpected output: spanLinksTraceId: 69c16e87000000006548ca4ebfd9f433
tid: 69c16e8700000000
hexProcessTraceId: 6548ca4ebfd9f433
hexProcessSpanId: 2ac489da59a71f81
processTraceId: 7298305635728880691
processSpanId: 3081739615928262529

phpvfscomposer://tests/vendor/phpunit/phpunit/phpunit:106

View all

ℹ️ Info

No other issues found (see more)

❄️ No new flaky tests detected

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 60.66%

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: abf876d | Docs | Datadog PR Page | Was this helpful? React with 👍/👎 or give us feedback!}