only run goveralls if secure variables are available