actions/codecov-action
3
0
Fork 0
mirror of https://github.com/codecov/codecov-action.git synced 2026-02-15 23:41:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Migrate to v5

Browse source
This commit is contained in:
RA80533 2021-07-21 04:52:37 -04:00
parent 16bc085eaf
commit 51773137e8
No known key found for this signature in database
GPG key ID: BB4D9E2AD2E21B54
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/validate.ts
View file

@ -31,14 +31,14 @@ const verify = async (filename: string) => {
// Verify shasum // Verify shasum
const verified = await openpgp.verify({ const verified = await openpgp.verify({
message: await openpgp.cleartext.fromText(shasum), message: await openpgp.createMessage({ text: shasum }),
signature: await openpgp.signature.readArmored(shaSig), signature: await openpgp.readSignature({ armoredSignature: shaSig }),
publicKeys: (await openpgp.key.readArmored(publicKeyArmored)).keys, verificationKeys: await openpgp.readKeys({ armoredKeys: publicKeyArmored }),
}); });
const {valid} = verified.signatures[0]; const valid = await verified.signatures[0].verified;
if (valid) { if (valid) {
core.info('==> SHASUM file signed by key id ' + core.info('==> SHASUM file signed by key id ' +
verified.signatures[0].keyid.toHex(), verified.signatures[0].keyID.toHex(),
); );
} else { } else {
setFailure('Codecov: Error validating SHASUM signature', true); setFailure('Codecov: Error validating SHASUM signature', true);