Internal coverage: locally download codecov script for security (#2904)

This commit is contained in:
Wilson Snyder 2021-04-24 09:38:38 -04:00
parent 15802dadf1
commit 82b878ce42
3 changed files with 1887 additions and 3 deletions

View File

@ -166,9 +166,9 @@ elif [ "$CI_BUILD_STAGE_NAME" = "test" ]; then
fatal "Unknown test: $TESTS" fatal "Unknown test: $TESTS"
;; ;;
esac esac
# Upload coverage data to codecov.io # Upload coverage data
if [[ $TESTS == coverage-* ]]; then if [[ $TESTS == coverage-* ]]; then
bash <(curl -s https://codecov.io/bash) -f nodist/obj_dir/coverage/app_total.info bash <(cat ci/coverage-upload.sh) -f nodist/obj_dir/coverage/app_total.info
fi fi
else else
############################################################################## ##############################################################################

1884
ci/coverage-upload.sh Executable file

File diff suppressed because it is too large Load Diff

View File

@ -194,7 +194,7 @@ def test():
if Args.stage_enabled[18]: if Args.stage_enabled[18]:
ci_fold_start("upload") ci_fold_start("upload")
print("Stage 18: Upload") print("Stage 18: Upload")
cmd = "bash <(curl -s https://codecov.io/bash) -f " + cc_dir + "/app_total.info" cmd = "bash <(cat ci/coverage-upload.sh) -f " + cc_dir + "/app_total.info"
print("print: Not running: export CODECOV_TOKEN=<hidden>") print("print: Not running: export CODECOV_TOKEN=<hidden>")
print("print: Not running: " + cmd) print("print: Not running: " + cmd)
ci_fold_end() ci_fold_end()