From e58041978da97fbe239bc63258e2622019e56e0c Mon Sep 17 00:00:00 2001 From: Vitah Lin Date: Tue, 9 Jun 2026 12:58:37 +0800 Subject: [PATCH] Fix Codecov action GPG verification failure (#15314) ## Issue The Codecov workflow failed while running `codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2` (`v6`) because the downloaded Codecov CLI could not be verified with GPG. ```text Run codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 ==> Running Action version 6.0.0 ... gpg: Can't check signature: No public key ==> Could not verify signature. Please contact Codecov if problem continues Exiting... ``` ## Change Update the Codecov upload step to use `codecov/codecov-action v7.0.0`, which includes the updated wrapper/signature verification behavior. --- .github/workflows/codecov.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml index cec367b903..cc98e7829b 100644 --- a/.github/workflows/codecov.yml +++ b/.github/workflows/codecov.yml @@ -26,7 +26,7 @@ jobs: make lcov - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} with: