Hacker GitHub

← All repos

codecov/codecov-action

View on GitHub ↗ ★ 1,718 Python

GitHub Action that uploads coverage to Codecov :open_umbrella:

6 mentions on Hacker News by 5 people: 2 stories, 4 comments · first 2021-04-15 · latest 2025-12-08

Mentions per year 6 mentions · busiest year 2021 (5)
20082026
AllStoriesComments NewestTopOldest
  1. Yeah, only works if all used Actions would use SHAs too, which is not the case. Positive example: https://github.com/codecov/codecov-action/blob/96b38e9e60ee6... Negative example: https://github.com/armbian/build/blob/54808ecff253fb71615161…
    comment by Kovah · 2025-12-08 · in GitHub Actions has a package manager, and it might be the worst
  2. ▲ 4
    Tell HN: Codecov learned nothing from their security breach
    story by stabbles · 2021-10-13 · 1 comment
  3. ▲ 2
    Codecov verifies checksums by downloading them
    story by stabbles · 2021-04-20 · 2 comments
  4. …in improving their posture. I hope this is a wake up call for them and other Saas companies. [1] https://github.com/codecov/codecov-action/pull/282
    comment by throwbacktictac · 2021-04-15 · in Codecov Bash Uploader compromised
  5. do they mean that the Docker image at https://github.com/codecov/codecov-action contained a secret allowing someone to modify the script served by https://codecov.io/bash ?
    comment by brown9-2 · 2021-04-15 · in Codecov Bash Uploader compromised
  6. Interesting that no hash/checksum verification has been added in their CI actions, like here, yet: https://github.com/codecov/codecov-action/blob/master/src/in...
    comment by lhobas · 2021-04-15 · in Codecov Bash Uploader compromised