Fix Codecov action GPG verification failure (#15314)

## Issue

The Codecov workflow failed while running
`codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2` (`v6`)
because the downloaded Codecov CLI could not be verified with GPG.

```text
Run codecov/codecov-action@57e3a136b7
==> Running Action version 6.0.0
...
gpg: Can't check signature: No public key
==> Could not verify signature. Please contact Codecov if problem continues
    Exiting...
```

## Change

Update the Codecov upload step to use `codecov/codecov-action v7.0.0`,
which includes the updated wrapper/signature verification behavior.
This commit is contained in:
Vitah Lin 2026-06-09 12:58:37 +08:00 committed by GitHub
parent 23b90e906f
commit e58041978d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -26,7 +26,7 @@ jobs:
make lcov
- name: Upload coverage reports to Codecov
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
env:
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
with: