From dd426b6af741461a82a331efdfcbe357a191573e Mon Sep 17 00:00:00 2001 From: Tom Hu <88201630+thomasrockhu-codecov@users.noreply.github.com> Date: Thu, 31 Oct 2024 08:44:00 -0500 Subject: [PATCH] Update dist/codecov.sh --- dist/codecov.sh | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/dist/codecov.sh b/dist/codecov.sh index 2c6950b..5aa8c6b 100755 --- a/dist/codecov.sh +++ b/dist/codecov.sh @@ -100,12 +100,7 @@ CC_PUBLIC_PGP_KEY=$(curl https://keybase.io/codecovsecurity/pgp_keys.asc) curl -Os "${sha_url}.sig" if ! gpg --verify "${cc_filename}.SHA256SUM.sig" "${cc_filename}.SHA256SUM"; then - exit_if_error "Could not verify signature. Please contact Codecov if problem continues" - fi - if ! (shasum -a 256 -c "${cc_filename}.SHA256SUM" || \ - sha256sum -c "${cc_filename}.SHA256SUM"); - then - exit_if_error "Could not verify SHASUM. Please contact Codecov if problem continues" + exit_if_error "Could not verify SHASUM. Please contact security@codecov.io if problem continues" fi say "$g==>$x CLI integrity verified" say