mirror of
https://github.com/codecov/codecov-action.git
synced 2026-06-28 01:46:57 +00:00
fix: fetch Codecov PGP key from keybase.io/codecovsecops
The Codecov security PGP key moved from keybase.io/codecovsecurity to keybase.io/codecovsecops. Update the bundled uploader script so GPG signature validation imports the key from the correct location. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
2
dist/codecov.sh
vendored
2
dist/codecov.sh
vendored
@@ -110,7 +110,7 @@ then
|
||||
chmod +x "$CC_COMMAND"
|
||||
fi
|
||||
else
|
||||
echo "$(curl -s https://keybase.io/codecovsecurity/pgp_keys.asc)" | \
|
||||
echo "$(curl -s https://keybase.io/codecovsecops/pgp_keys.asc)" | \
|
||||
gpg --no-default-keyring --import
|
||||
# One-time step
|
||||
say "$g==>$x Verifying GPG signature integrity"
|
||||
|
||||
Reference in New Issue
Block a user