cobertura-analysis
Parses Cobertura XML coverage reports (the JVM-canonical format originally from the cobertura-cobertura tool, also emitted by JaCoCo `--coverage-xml`, coverage.py `--xml`, Istanbul / Jest `cobertura` reporter, gocover-cobertura, and dotnet's `coverlet`). Walks the coverage-04 DTD structure (coverage → packages → classes → methods → lines + conditions), computes per-file deltas, and emits PR-time gating verdicts. Use when the existing CI emits Cobertura XML - typical for JVM-heavy stacks and tools that ship Cobertura as a default reporter.
Install with skills.sh (any agent)
npx skills add testland/qa --skill cobertura-analysiscobertura-analysis
Overview
Cobertura is "a free Java tool that calculates the percentage of code accessed by tests" (cobertura-home (opens in new window)). Its XML report format - sometimes called coverage-04.dtd after its DTD - became the de-facto JVM coverage interchange and is now emitted by JaCoCo, coverage.py (--xml), Jest's cobertura reporter, Istanbul, gocover-cobertura, .NET's coverlet, and many CI plugins.
This skill covers parsing the canonical Cobertura XML structure (cobertura-dtd (opens in new window)), computing per-class deltas, and PR-gating.
When to use
If the CI already emits LCOV, see lcov-analysis - Cobertura and LCOV are sibling formats; pick whichever the existing reporter produces to avoid running two coverage tools.
Step 1 - Schema (coverage-04.dtd)
Per cobertura-dtd (opens in new window), the DTD declares this hierarchy:
coverage
├── sources* (paths the report is rooted at)
└── packages
└── package* (one per package; in non-Java languages, often per-directory)
└── classes
└── class* (one per file, despite the name)
├── methods
│ └── method*
│ └── lines/line*
└── lines
└── line* (line | condition)Required attributes per cobertura-dtd (opens in new window):
| Element | Required attributes |
|---|---|
coverage | line-rate, branch-rate, lines-covered, lines-valid, branches-covered, branches-valid, complexity, version, timestamp |
package | name, line-rate, branch-rate, complexity |
class | name, filename, line-rate, branch-rate, complexity |
method | name, signature, line-rate, branch-rate, complexity |
line | number, hits, plus branch="false" (default) and condition-coverage="100%" (default) |
Two important nuances:
Step 2 - Sample document
<?xml version="1.0" ?>
<!DOCTYPE coverage SYSTEM "http://cobertura.sourceforge.net/xml/coverage-04.dtd">
<coverage line-rate="0.78" branch-rate="0.62" lines-covered="156" lines-valid="200"
branches-covered="31" branches-valid="50" complexity="0" version="2.1.1" timestamp="1715000000">
<sources>
<source>src</source>
</sources>
<packages>
<package name="checkout" line-rate="0.92" branch-rate="0.83" complexity="0">
<classes>
<class name="cart.ts" filename="checkout/cart.ts" line-rate="0.88" branch-rate="0.75" complexity="0">
<methods>
<method name="addItem" signature="(Item)V" line-rate="1.0" branch-rate="1.0" complexity="0">
<lines><line number="11" hits="42"/></lines>
</method>
</methods>
<lines>
<line number="11" hits="42"/>
<line number="12" hits="42"/>
<line number="13" hits="42" branch="true" condition-coverage="50% (1/2)"/>
<line number="33" hits="0"/>
</lines>
</class>
</classes>
</package>
</packages>
</coverage>The SYSTEM DOCTYPE URL above no longer resolves, but emitters still write that exact literal - see the hardcoded string in istanbul-reports' cobertura reporter (opens in new window) - so keep it in fixtures and disable external-entity resolution when parsing. A live copy of the DTD text is at raw.githubusercontent.com/cobertura/web (opens in new window).
The condition-coverage attribute on a branch line ("50% (1/2)") means one of two branch arms was hit. Parse it as /(\d+(?:\.\d+)?)% \((\d+)\/(\d+)\)/ to extract (pct, hit, total).
Step 3 - Parse
# scripts/parse_cobertura.py
import re
import xml.etree.ElementTree as ET
CC_RE = re.compile(r'(\d+(?:\.\d+)?)% \((\d+)/(\d+)\)')
def parse_cobertura(path):
root = ET.parse(path).getroot()
files = []
for pkg in root.findall('packages/package'):
for cls in pkg.findall('classes/class'):
lines = []
for ln in cls.findall('lines/line'):
hit = int(ln.get('hits', '0'))
line_data = {'number': int(ln.get('number')), 'hits': hit}
if ln.get('branch') == 'true':
cc = CC_RE.match(ln.get('condition-coverage', '0% (0/0)'))
if cc:
pct, br_hit, br_total = cc.groups()
line_data['branch'] = {
'pct': float(pct), 'hit': int(br_hit), 'total': int(br_total),
}
lines.append(line_data)
files.append({
'package': pkg.get('name'),
'name': cls.get('name'),
'filename': cls.get('filename'),
'line_rate': float(cls.get('line-rate')),
'branch_rate': float(cls.get('branch-rate')),
'lines': lines,
})
return {
'overall': {
'line_rate': float(root.get('line-rate')),
'branch_rate': float(root.get('branch-rate')),
'lines_covered': int(root.get('lines-covered')),
'lines_valid': int(root.get('lines-valid')),
'branches_covered': int(root.get('branches-covered')),
'branches_valid': int(root.get('branches-valid')),
},
'files': files,
}Step 4 - Diff vs baseline + gate
The same shape as lcov-analysis Step 4 / Step 5 - pivot on filename, compute deltas, apply per-file + whole-repo gates.
def diff(current, baseline):
base = {f['filename']: f for f in baseline['files']}
out = []
for f in current['files']:
b = base.get(f['filename'])
out.append({
'filename': f['filename'],
'line_now': f['line_rate'] * 100,
'line_then': b['line_rate'] * 100 if b else None,
'branch_now': f['branch_rate'] * 100,
'branch_then': b['branch_rate'] * 100 if b else None,
'is_new': b is None,
})
return outStep 5 - Cross-tool normalization
When the team has Cobertura from one language and LCOV from another, emit a normalized intermediate (file → line% → branch% → uncovered line list) that both parsers feed:
def normalize_cobertura(parsed):
return [
{
'path': f['filename'],
'line_pct': f['line_rate'] * 100,
'branch_pct': f['branch_rate'] * 100,
'uncovered_lines': [ln['number'] for ln in f['lines'] if ln['hits'] == 0],
}
for f in parsed['files']
]The downstream gate / reporter consumes the normalized shape, language-agnostic.
Step 6 - CI shape
# Java with JaCoCo emitting Cobertura
- run: ./mvnw -B verify
- run: |
# JaCoCo's Cobertura output (via maven-jacoco-plugin's report goal):
cat target/site/jacoco/cobertura.xml > coverage.xml
# Python with coverage.py
- run: |
coverage run -m pytest
coverage xml -o coverage.xml
# JavaScript with Jest
- run: npx jest --coverage --coverageReporters=cobertura
# Then parse + gate (same shape regardless of upstream)
- run: python scripts/parse_cobertura.py coverage.xml > current.json
- run: python scripts/coverage_gate.py current.json baseline.jsonAnti-patterns
| Anti-pattern | Why it fails | Fix |
|---|---|---|
Treating line-rate as a percentage | The DTD specifies decimal 0 - 1 (cobertura-dtd (opens in new window)); code mistakes 0.85 for 85 / 100 mid-pipeline. | Multiply by 100 only in display layer; preserve decimal in storage. |
Pivoting on class@name instead of class@filename | "name" can be a Java FQCN that overlaps two physical files (inner classes). | Pivot on filename (Step 3). |
Ignoring condition-coverage | Branch coverage drops invisible; line% looks fine while branch% degrades. | Parse the pct (hit/total) form (Step 3); gate branch% separately. |
| Mixing Cobertura + LCOV without normalization | Branch coverage definitions differ; cross-tool sums lie. | Normalize first (Step 5). |
Using coverage root's summary blindly | Some emitters miscompute the summary on multi-package merges. | Recompute by summing lines-covered / lines-valid from all class records. |
Loading multi-100MB XML with ET.parse | Whole-tree-in-memory; OOM on large reports. | ET.iterparse for streaming + element clearing. |
Assuming package@name == JVM package | Non-Java emitters use it for directory paths or arbitrary labels. | Treat package@name as a label only; group by filename. |
Limitations
References
Related skills
allure-reports
Configures Allure Report (test-runner adapter install, `allure-results` directory wiring, `categories.json` for failure classification, `history-trend.json` retention via the copy-history-between-runs pattern), runs the Allure CLI to convert `allure-results` to a static HTML site, and uploads the report as a CI artifact. Use when the team needs richer test reporting than JUnit XML - step-level attachments, per-test history, retry tracking, and severity / epic / feature labeling across framework-agnostic adapters (pytest, Jest, JUnit, TestNG, NUnit, Mocha). As a rich static HTML report generator, it is the open-source alternative to extentreports (JVM/.NET per-test HTML narrative); for hosted cross-run flakiness analytics rather than a static per-run report use currents-integration.
coverage-diff-reporter
Builds a per-PR coverage delta report from any pair of LCOV / Cobertura / JSON coverage outputs (current run + baseline from the merge target) - emits a per-file table with line% / branch% deltas, called-out new files, hidden drops (overall +0.1pp but one file -8pp), and a single-line PR-comment summary. Use when the team has coverage in CI but needs human-readable PR feedback that points at the specific file the reviewer should focus on, not just an aggregate number.
coverage-py-analysis
Configures coverage.py for Python projects - wires `coverage run` (replacing `python` for instrumentation), enables branch coverage via the `--branch` flag or `branch = True` config, manages the `.coverage` data file (single-process and `combine` for parallel pytest-xdist runs), authors `.coveragerc` with `source` / `omit` / `fail_under`, and emits the format the downstream tool needs (`coverage report` for terminal, `coverage xml` for Cobertura, `coverage html` for human review, `coverage lcov` for SaaS, `coverage json` for programmatic post-processing). Use for any Python test stack (pytest, unittest, nose) that needs PR-time coverage signal.
currents-integration
Wires Currents.dev cross-run test analytics into a Playwright suite: installs `@currents/playwright`, authors `currents.config.ts` (env-sourced `recordKey` + `projectId`), registers `currentsReporter()`, enables trace/video/screenshot artifacts, and runs via `npx pwc` so per-test traces stream to the Currents dashboard with over-time flakiness, slowest-test, and pass-rate trends. Use when a Playwright suite needs hosted cross-run suite-health analytics; for a static per-run report use extentreports or allure-reports, and to sync results into Jira test management use zephyr-integration or xray-integration.
extentreports
Configures ExtentReports v5 for a JVM (or .NET via `extentreports-dotnet`) test run: wires `ExtentSparkReporter`, `attachReporter`, `createTest`, the `info`/`pass`/`warning`/`skip`/`fail` log chain, screenshots via `MediaEntityBuilder`, hierarchical `createNode` parent/child tests, and category/author/device labels, emitting a static HTML report alongside JUnit XML for CI artifact upload. Use when a suite on the Aventstack ExtentReports stack wants a richer per-test HTML narrative than JUnit XML gives; for code-coverage reporting use jacoco-analysis, and for hosted cross-run flakiness analytics use currents-integration.
jacoco-analysis
Configures JaCoCo for JVM projects (Java / Kotlin / Scala / Groovy) - wires the runtime agent via `jacoco-maven-plugin` `prepare-agent`, generates per-build reports (HTML / XML / CSV) via the `report` goal, gates the build via the `check` goal with element / limit / minimum rules, parses the six native counters (instructions, branches, lines, methods, classes, cyclomatic complexity), and converts JaCoCo XML to LCOV / Cobertura when downstream tools need a different format. Use when the JVM build is Maven / Gradle and the team wants the canonical JVM coverage tool - or to convert JaCoCo output for cross-language coverage aggregation.
jest-coverage-analysis
Configures Jest's built-in coverage (Istanbul-instrumented `babel` provider or V8-native `v8` provider), wires the right `coverageReporters` for downstream consumption (`lcov` for SaaS / cross-tool, `cobertura` for Jenkins, `text-summary` for terminal, `html` for human review), authors per-file `coverageThreshold` rules that focus the gate on critical paths (vs the global-only foot-gun), and parses the per-file JSON output for PR-time deltas. Use when the project tests with Jest (or Vitest, which uses the same Istanbul/V8 provider) and the team needs PR-time coverage signal that's both local-runnable and CI-gateable.
junit-xml-analysis
Parses JUnit-format XML reports (the de-facto interchange format every CI ingests - Jenkins, GitHub Actions, GitLab, Buildkite, CircleCI) into structured, machine-readable per-suite and per-case metrics tables (passed / failed / errored / skipped, time, classname, message, stack), groups failures by classname for trend analysis, and distinguishes "new failures vs flakes" by cross-referencing the `flakyFailure` and `rerunFailure` rerun elements. Use when the downstream consumer is a dashboard, script, or aggregator - not when the goal is a human-readable prose summary (use test-run-summary-author for that). Single-run, in-XML aggregation only; for cross-run cross-environment roll-ups, use a cross-run test-suite aggregator.
lcov-analysis
Parses LCOV `.info` text files (the de-facto coverage interchange format produced by gcov, llvm-cov, Coverage.py via `py2lcov`, JaCoCo via `xml2lcov`, Devel::Cover, Jest via `lcov` reporter, NYC, and most others). Extracts per-file line / function / branch metrics from the canonical record keywords (TN/SF/FN/FNDA/FNF/FNH/BRDA/BRF/BRH/DA/LH/LF), computes the diff vs a baseline, and emits per-file gating verdicts. Use for PR coverage gates that don't depend on a specific language runtime.
test-coverage-targeter
Builds a "what to test next" recommendation by combining a coverage report (LCOV / Cobertura / coverage.py JSON / Jest JSON / JaCoCo XML) with the PR's `git diff`, ranking uncovered branches by risk × cost - risk weighted by McCabe cyclomatic complexity and code-churn frequency, cost weighted by the unit-test pyramid layer (unit tests cheaper than integration than E2E). Emits a prioritized list with concrete file:line targets and the test layer recommended for each. Use when a team has the budget to write 5 - 10 new tests and needs help picking which uncovered code to target first instead of blindly chasing 100% coverage.
test-run-summary-author
Build-an-X workflow that turns a structured test-run artifact (JUnit XML, Allure JSON, TestRail / Xray / Zephyr export) plus optional release context (version, build URL, deploy target) into a narrative markdown summary for release notes, an exec status update, or a stand-up Slack post. Distinct from the per-framework parsers junit-xml-analysis / allure-reports / coverage-diff-reporter, which emit structured tabular reports: this skill takes the same data and writes the human-readable narrative. Use when a manager needs a draft release note or stand-up summary from a single run; for cross-run trend analytics use currents-integration.
testrail-integration
Syncs test runs / results / cases between an automated test suite and TestRail (Gurock / Idera) - opens a Test Run for the build (`add_run`), batches per-case results back via `add_results_for_cases` (preferred over per-test `add_result_for_case` - N+1 API calls vs 1), maps the test framework's pass/fail/skip to TestRail status IDs, and attaches build URL + version + elapsed time. Use when the team's test management is standalone TestRail (not a Jira app) and automated suites must update it without a human copy-paste step; when the TCM is instead a Jira app use xray-integration (Xray) or zephyr-integration (Zephyr Scale), and for hosted cross-run flakiness analytics rather than TCM sync use currents-integration.
xray-integration
Imports CI test results into Xray for Jira - authenticates via the `client_id` + `client_secret` → JWT exchange (Cloud) or PAT / Basic (Server), posts to the format-specific `/api/v2/import/execution/*` endpoint (`/junit` for JUnit XML, `/cucumber` for Cucumber JSON, `/nunit` / `/testng` / `/robot` for the others), and maps automated results to existing Xray Test issues via the `xray-junit-extensions` `@XrayTest(key="...")` annotation. Use when the team uses the Xray Jira app to manage Test, Test Set, and Test Execution issue types and CI must keep those execution issues in sync; for the other Jira TCM app use zephyr-integration (Zephyr Scale), for standalone non-Jira TestRail use testrail-integration, and for hosted cross-run flakiness analytics rather than TCM sync use currents-integration.
zephyr-integration
Syncs automated test results to Zephyr Scale for Jira (formerly TM4J / SmartBear / Adaptavist): picks the product variant (Scale Cloud / Squad / Enterprise), authenticates with a long-lived API token as a Bearer header, opens a Test Cycle per build, posts executions via `POST /testexecutions` (or bulk JUnit via `/automations/executions/junit`), and maps test methods to Zephyr Test Cases via `@TestCaseKey`-style annotations. Use when the team's Jira test management is Zephyr Scale; for the Xray Jira app use xray-integration, for standalone TestRail use testrail-integration, and for over-time flakiness analytics rather than TCM sync use currents-integration.