.github/workflows/enforce-license-compliance.yml

@@ -0,0 +1,14 @@
+name: Enforce License Compliance
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  enforce-license-compliance:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Enforce License Compliance'
+        uses: getsentry/action-enforce-license-compliance@57ba820387a1a9315a46115ee276b2968da51f3d # main
+        with:
+          fossa_api_key: ${{ secrets.FOSSA_API_KEY }}

Makefile

@@ -1,7 +1,7 @@
 deploy:
 	$(eval VERSION := $(shell cat src/version))
-	git tag -d v7
+	git tag -d v6
-	git push origin :v7
+	git push origin :v6
-	git tag v7
+	git tag v6
 	git tag v$(VERSION) -s -m ""
 	git push origin --tags

README.md

@@ -6,10 +6,6 @@
 
 ### Easily upload coverage reports to Codecov from GitHub Actions
 
-## v7 Release
-
-`v7` of the Codecov GitHub Action bumps the [Codecov Wrapper](https://github.com/codecov/wrapper) submodule, which now fetches the Codecov Uploader PGP verification key from the `codecovsecops` Keybase account.
-
 ## v6 Release
 
 `v6` of the Codecov GitHub Action support node24

dist/codecov.sh

@@ -37,7 +37,7 @@ g="\033[0;32m"  # info/debug
 r="\033[0;31m"  # errors
 x="\033[0m"
 retry="--retry 5 --retry-delay 2"
-CC_WRAPPER_VERSION="0.2.9"
+CC_WRAPPER_VERSION="0.2.7"
 CC_VERSION="${CC_VERSION:-latest}"
 CC_FAIL_ON_ERROR="${CC_FAIL_ON_ERROR:-false}"
 CC_RUN_CMD="${CC_RUN_CMD:-upload-coverage}"
@@ -69,13 +69,7 @@ then
     exit_if_error "Could not install via pypi."
     exit
   fi
-  if [[ "$CC_CLI_TYPE" == "codecov-cli" ]]; then
-    CC_COMMAND="codecovcli"
-  elif [[ "$CC_CLI_TYPE" == "sentry-prevent-cli" ]]; then
-    CC_COMMAND="sentry-prevent-cli"
-  else
   CC_COMMAND="${CC_CLI_TYPE}"
-  fi
 else
   if [ -n "$CC_OS" ];
   then
@@ -116,7 +110,7 @@ then
     chmod +x "$CC_COMMAND"
   fi
 else
-  echo "$(curl -s https://keybase.io/codecovsecops/pgp_keys.asc)" | \
+  echo "$(curl -s https://keybase.io/codecovsecurity/pgp_keys.asc)" | \
     gpg --no-default-keyring --import
   # One-time step
   say "$g==>$x Verifying GPG signature integrity"

src/scripts

@@ -1 +1 @@
-Subproject commit bad8df56cd845fa9c6115a924bbd3215e1926ec8
+Subproject commit 473e2924695f5dbe1cca4a5f6f8a7182c2ddadc5

src/version

@@ -1 +1 @@
-7.0.0
+6.0.1