Skip to content

CI: Submit coverage to codecov via pinned PyPI package #1008

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Apr 16, 2021

Conversation

effigies
Copy link
Member

Following a security incident at Codecov, the GitHub action should be considered unsafe as it internally runs curl | bash.

Moving to our CI scripts.

xref #1007 codecov/codecov-action#281

Following a security incident at Codecov, the GitHub action should be
considered unsafe as it internally runs `curl | bash`.

Moving to our CI scripts.
@codecov
Copy link

codecov bot commented Apr 16, 2021

Codecov Report

Merging #1008 (710dadb) into maint/3.2.x (cb110b0) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@             Coverage Diff              @@
##           maint/3.2.x    #1008   +/-   ##
============================================
  Coverage        91.89%   91.89%           
============================================
  Files              101      101           
  Lines            12550    12550           
  Branches          2209     2209           
============================================
  Hits             11533    11533           
  Misses             680      680           
  Partials           337      337           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update cb110b0...710dadb. Read the comment docs.

@effigies effigies merged commit 06a60fd into maint/3.2.x Apr 16, 2021
@effigies effigies deleted the ci/harden_codecov branch April 16, 2021 16:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant