Repository navigation
Migrating keybase accounts/gpg verification failure #1956
Description
Tom from Codecov here. Some of you may have experienced an issue with gpg verification today. We unfortunately lost our ability to update our keybase account and have migrated from keybase.io/codecovsecurity to keybase.io/codecovsecops. In order to prevent future misuse of the codecovsecurity, we have bricked the account.
We will be publishing an updated version of the Action which should resolve the issue
Reacted by favonia, Tibor, Josh Ghoulberg 👻, Timo Kössler, Edgar Ramírez Mondragón, Cathal, Mark Wiemer, Danieyal, Sheng Slogar, Xianpeng Shen and 13 more
Reacted by Tarek
Activity
[-]Migrating keybase accounts[/-][+]Migrating keybase accounts/gpg verification failure[/+]thomasrockhu-codecov commentedon Jun 7, 2026
v7 of the Action has now been released which has the fix stated above.
v6.0.2 of the Action is a copy of v7 in order to facilitate ease of adoption
fix(scan): abort upsert on context cancel, reuse prepared stmt; bump …
fix(scan): batch upserts with busy-retry to survive concurrent writers (
chore: use binary codecov cli installtion instead of pypi in ci action
chore: use binary codecov cli installtion instead of pypi in ci action
Upgrade codecov-action
ci: bump codecov-action to v6.0.2 for keybase migration (#9473)
Update codecov action to 7.0 (#108)
frenck commentedon Jun 7, 2026
Something went wrong?
Kinda suspicious to be honest. Especially considering it is released as a major version bump a without any changes, but changes are listed? 😕
../Frenck
Update codecov-action to v7 - due to codecov/codecov-action#1956
michael-cybrid commentedon Jun 7, 2026
Can you please update your CircleCI integration as well?
Upgrade `codecov/codecov-action` to version 7.0.0
thomasrockhu-codecov commentedon Jun 7, 2026
@frenck v7 was the original release, but on second thought to help ease user transition (as this is a must upgrade if verification is turned on) it was also pushed as a copy to v6.0.2. The release notes in
6.0.2mention that it's a copy of v7.0.071 remaining items
[GHA] [Coverage] Bump codecov-action to 7.0.0 (openvinotoolkit#36353)
build: bump codecov-action v5.5.4 -> v7.0.0
chore(ci): bump codecov-action to v5.5.5 for GPG key migration (#412)
🔧 Bump tox-dev/workflow reusable SHA
🔧 Bump tox-dev/workflow reusable SHA
⬆️ Bump codecov/codecov-action to v7.0.0
⬆️ Bump codecov/codecov-action to v7.0.0
ci: bump codecov-action to v6 and fail CI on upload error (#1142)
🧪 Bump `reusable-tox.yml` to `1bb9615`
Remove integration package for RagaAI Catalyst (NVIDIA#2013)
fix(ci): pin codecov-action v7.0.0 and enforce the CLI signature chec…
ci: bump codecov-action to v5.5.5 to fix the failing coverage upload
ci: bump codecov-action to v6 and fail CI on upload error (#98)
Update codecov-action to v6.0.2, which verifies the uploader with Cod…
Push images with the registry credentials kept in this organisation (#17