Provider
CodecovIncident detail
Codecov uploaders (Action/Orb/Step) fail gpg verification
Resolved incidentMinor
Timeline window
to
Get alerted the next time Codecov breaks
Free email alerts for the handful of vendors you cannot afford to miss. No card, live in about a minute. Paid plans add Slack, Teams, Discord, and webhook delivery across your whole stack, plus higher API quotas.
Timeline
Incident updates
Every update Codecov posted, oldest to newest, exactly as it appeared on their official status page.
Resolved
On Saturday, June 6th, the Codecov gpg public key located at keybase.io/codecovsecurity was absent. This caused widespread outages for users uploading with the Codecov
- GitHub Action
- CircleCI Orb
- Bitrise Step
In order to quickly move and prevent further outages, the Codecov team deleted the `codecovsecurity` account and created `codecovsecops` with the same public gpg key. This key can be verified against any pre-existing CLI to prove it is the same key and also at about.codecov.io/security. The key location was updated in all of the above uploaders on the latest versions.
Keep exploring
More from Codecov
Neighboring incidents on Codecov's timeline and the rest of their record on OutageDeck.