codecov/codecov-action
1
0
Fork 0
mirror of https://github.com/codecov/codecov-action.git synced 2025-12-08 16:16:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Migrate to v5

Browse Source
This commit is contained in:
RA80533
2021-07-21 04:52:37 -04:00
parent 16bc085eaf
commit 51773137e8
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/validate.ts
View File

@@ -31,14 +31,14 @@ const verify = async (filename: string) => {
// Verify shasum
const verified = await openpgp.verify({
message: await openpgp.cleartext.fromText(shasum),
signature: await openpgp.signature.readArmored(shaSig),
publicKeys: (await openpgp.key.readArmored(publicKeyArmored)).keys,
message: await openpgp.createMessage({ text: shasum }),
signature: await openpgp.readSignature({ armoredSignature: shaSig }),
verificationKeys: await openpgp.readKeys({ armoredKeys: publicKeyArmored }),
});
const {valid} = verified.signatures[0];
const valid = await verified.signatures[0].verified;
if (valid) {
core.info('==> SHASUM file signed by key id ' +
verified.signatures[0].keyid.toHex(),
verified.signatures[0].keyID.toHex(),
);
} else {
setFailure('Codecov: Error validating SHASUM signature', true);