fix: fetch Codecov PGP key from keybase.io/codecovsecops

The Codecov security PGP key moved from keybase.io/codecovsecurity to
keybase.io/codecovsecops. Update the bundled uploader script so GPG
signature validation imports the key from the correct location.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Tom Hu 2026-06-08 18:18:37 -06:00
parent 75cd11691c
commit f00ac4b766
No known key found for this signature in database

2
dist/codecov.sh vendored
View file

@ -110,7 +110,7 @@ then
chmod +x "$CC_COMMAND"
fi
else
echo "$(curl -s https://keybase.io/codecovsecurity/pgp_keys.asc)" | \
echo "$(curl -s https://keybase.io/codecovsecops/pgp_keys.asc)" | \
gpg --no-default-keyring --import
# One-time step
say "$g==>$x Verifying GPG signature integrity"