Compare commits

...

2 Commits
v7.0.0 ... v5.x

Author SHA1 Message Date
Tom Hu
0fb7174895 chore(release): 5.5.5
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-08 18:18:38 -06:00
Tom Hu
f00ac4b766 fix: fetch Codecov PGP key from keybase.io/codecovsecops
The Codecov security PGP key moved from keybase.io/codecovsecurity to
keybase.io/codecovsecops. Update the bundled uploader script so GPG
signature validation imports the key from the correct location.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-08 18:18:37 -06:00
3 changed files with 10 additions and 2 deletions

View File

@@ -1,3 +1,11 @@
## v5.5.5
### What's Changed
* fix: fetch Codecov PGP key from keybase.io/codecovsecops
**Full Changelog**: https://github.com/codecov/codecov-action/compare/v5.5.4..v5.5.5
## v5.5.2
### What's Changed

2
dist/codecov.sh vendored
View File

@@ -110,7 +110,7 @@ then
chmod +x "$CC_COMMAND"
fi
else
echo "$(curl -s https://keybase.io/codecovsecurity/pgp_keys.asc)" | \
echo "$(curl -s https://keybase.io/codecovsecops/pgp_keys.asc)" | \
gpg --no-default-keyring --import
# One-time step
say "$g==>$x Verifying GPG signature integrity"

View File

@@ -1 +1 @@
5.5.4
5.5.5