From f00ac4b7660ead0a45492bc6c7a589c974dc8400 Mon Sep 17 00:00:00 2001
From: Tom Hu <tom.hu@harness.io>
Date: Mon, 8 Jun 2026 18:18:37 -0600
Subject: [PATCH] fix: fetch Codecov PGP key from keybase.io/codecovsecops

The Codecov security PGP key moved from keybase.io/codecovsecurity to
keybase.io/codecovsecops. Update the bundled uploader script so GPG
signature validation imports the key from the correct location.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 dist/codecov.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dist/codecov.sh b/dist/codecov.sh
index 0b77171..897574f 100755
--- a/dist/codecov.sh
+++ b/dist/codecov.sh
@@ -110,7 +110,7 @@ then
     chmod +x "$CC_COMMAND"
   fi
 else
-  echo "$(curl -s https://keybase.io/codecovsecurity/pgp_keys.asc)" | \
+  echo "$(curl -s https://keybase.io/codecovsecops/pgp_keys.asc)" | \
     gpg --no-default-keyring --import
   # One-time step
   say "$g==>$x Verifying GPG signature integrity"