fix: pull gpg key from keybase

codecov · Mar 7, 2024 · a873fd5 · a873fd5
1 parent 54bcd87
commit a873fd5
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 57 deletions.
diff --git a/dist/index.js b/dist/index.js
@@ -32685,12 +32685,13 @@ const verify = (filename, platform, version, verbose, failCi) => validate_awaite
             }));
         };
         // Import gpg key
-        gpg.call('', [
+        const pgpKeyRes = yield (0,undici.request)('https://keybase.io/codecovsecurity/pgp_keys.asc');
+        const pgpKey = yield pgpKeyRes.body.text();
+        gpg.call(pgpKey, [
             '--logger-fd',
             '1',
             '--no-default-keyring',
             '--import',
-            __nccwpck_require__.ab + "pgp_keys.asc",
         ], (err, importResult) => validate_awaiter(void 0, void 0, void 0, function* () {
             if (err) {
                 setFailure('Codecov: Error importing pgp key', failCi);

diff --git a/dist/index.js.map b/dist/index.js.map
diff --git a/src/pgp_keys.asc b/src/pgp_keys.asc
diff --git a/src/validate.ts b/src/validate.ts
@@ -93,12 +93,15 @@ const verify = async (
     };
 
     // Import gpg key
-    gpg.call('', [
+    const pgpKeyRes = await request(
+        'https://keybase.io/codecovsecurity/pgp_keys.asc',
+    );
+    const pgpKey = await pgpKeyRes.body.text();
+    gpg.call(pgpKey, [
       '--logger-fd',
       '1',
       '--no-default-keyring',
       '--import',
-      path.join(__dirname, 'pgp_keys.asc'),
     ], async (err, importResult) => {
       if (err) {
         setFailure('Codecov: Error importing pgp key', failCi);