diff options
| author | Marc André Tanner <mat@brain-dump.org> | 2021-04-20 21:19:21 +0200 |
|---|---|---|
| committer | Marc André Tanner <mat@brain-dump.org> | 2021-04-20 21:19:21 +0200 |
| commit | c45275951dd19db4a621656be66680d28fad8ae2 (patch) | |
| tree | 4f810e4b6b99af1d5c1d5cc95481f578a3a12ea2 | |
| parent | cbd23b9cad7729cc05fa759faa54dd76a48c06ab (diff) | |
| download | vis-c45275951dd19db4a621656be66680d28fad8ae2.tar.gz vis-c45275951dd19db4a621656be66680d28fad8ae2.tar.xz | |
ci: verify codecov script before using it
| -rw-r--r-- | .github/workflows/macos.yml | 8 | ||||
| -rw-r--r-- | .github/workflows/ubuntu.yml | 8 | ||||
| -rw-r--r-- | .github/workflows/windows.yml | 9 |
3 files changed, 22 insertions, 3 deletions
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml index b0468ee..173a520 100644 --- a/.github/workflows/macos.yml +++ b/.github/workflows/macos.yml @@ -49,4 +49,10 @@ jobs: env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} run: | - bash <(curl -s https://codecov.io/bash) + curl -s https://codecov.io/bash > codecov + curl -s https://raw.githubusercontent.com/codecov/codecov-bash/master/SHA256SUM > codecov.sha256 + if ! sha256sum -c --ignore-missing --status codecov.sha256 ; then + echo "Download checksum verification failed" + exit 1 + fi + bash < codecov diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml index 2946588..d2750a9 100644 --- a/.github/workflows/ubuntu.yml +++ b/.github/workflows/ubuntu.yml @@ -55,4 +55,10 @@ jobs: env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} run: | - bash <(curl -s https://codecov.io/bash) + curl -s https://codecov.io/bash > codecov + curl -s https://raw.githubusercontent.com/codecov/codecov-bash/master/SHA256SUM > codecov.sha256 + if ! sha256sum -c --ignore-missing --status codecov.sha256 ; then + echo "Download checksum verification failed" + exit 1 + fi + bash < codecov diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index 6a74b00..c09c69d 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -54,4 +54,11 @@ jobs: shell: bash env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} - run: bash <(curl -s https://codecov.io/bash) + run: | + curl -s https://codecov.io/bash > codecov + curl -s https://raw.githubusercontent.com/codecov/codecov-bash/master/SHA256SUM > codecov.sha256 + if ! sha256sum -c --ignore-missing --status codecov.sha256 ; then + echo "Download checksum verification failed" + exit 1 + fi + bash < codecov |