Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace Codecov bash uploader with GHA counterpart #6074

Merged
merged 1 commit into from
Apr 16, 2021

Conversation

pierlon
Copy link
Contributor

@pierlon pierlon commented Apr 16, 2021

Summary

As of v1.4.0 the Codecov GHA calculates and verifies the checksum of the bash script used to upload code coverage reports.

This should help to prevent executing any unauthorized code if the bash script were to ever be compromised again (see https://about.codecov.io/security-update/).

Checklist

  • My code is tested and passes existing tests.
  • My code follows the Engineering Guidelines (updates are often made to the guidelines, check it out periodically).

@pierlon pierlon added the WS:Core Work stream for Plugin core label Apr 16, 2021
@pierlon pierlon self-assigned this Apr 16, 2021
@westonruter westonruter added this to the v2.1 milestone Apr 16, 2021
@github-actions
Copy link
Contributor

Plugin builds for 1729010 are ready 🛎️!

@pierlon pierlon changed the title Replace Codecov bash uploader with GHA action counterpart Replace Codecov bash uploader with GHA counterpart Apr 16, 2021
@westonruter westonruter merged commit cc01b76 into develop Apr 16, 2021
@westonruter westonruter deleted the enhancement/codecov-action branch April 16, 2021 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
WS:Core Work stream for Plugin core
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants