codecov/codecov-action
1
0
Fork 0
mirror of https://github.com/codecov/codecov-action.git synced 2026-06-28 01:46:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: fetch Codecov PGP key from keybase.io/codecovsecops

Browse Source 
The Codecov security PGP key moved from keybase.io/codecovsecurity to
keybase.io/codecovsecops. Update the bundled uploader script so GPG
signature validation imports the key from the correct location.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Tom Hu
2026-06-08 18:18:37 -06:00
parent 75cd11691c
commit f00ac4b766
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
dist/codecov.sh vendored
View File

@@ -110,7 +110,7 @@ then
chmod +x "$CC_COMMAND" chmod +x "$CC_COMMAND"
fi fi
else else
echo "$(curl -s https://keybase.io/codecovsecurity/pgp_keys.asc)" | \ echo "$(curl -s https://keybase.io/codecovsecops/pgp_keys.asc)" | \
gpg --no-default-keyring --import gpg --no-default-keyring --import
# One-time step # One-time step
say "$g==>$x Verifying GPG signature integrity" say "$g==>$x Verifying GPG signature integrity"