diff --git a/action.yml b/action.yml index 9886830..fcb94b8 100644 --- a/action.yml +++ b/action.yml @@ -121,10 +121,10 @@ runs: id: codecov-upload shell: bash run: | - curl https://keybase.io/codecovsecurity/pgp_keys.asc | gpg --no-default-keyring --keyring trustedkeys.kbx --import # One-time step curl -Os https://cli.codecov.io/latest/linux/codecov curl -Os https://cli.codecov.io/latest/linux/codecov.SHA256SUM curl -Os https://cli.codecov.io/latest/linux/codecov.SHA256SUM.sig + gpg --import dist/pgp_keys.asc gpg --verify codecov.SHA256SUM.sig codecov.SHA256SUM shasum -a 256 -c codecov.SHA256SUM