Check codecov shasum before uploading test coverage

snyk · Apr 20, 2021 · ab7fac1 · ab7fac1
1 parent 5ff2946
commit ab7fac1
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -79,10 +79,17 @@ jobs:
       - checkout
       - run: make install-tools
       - run: make test
+      - run:
+          name: Check Codecov
+          command: |
+            curl -s -o codecov https://codecov.io/bash \
+              && VERSION=$(grep 'VERSION=\".*\"' codecov | cut -d'"' -f2) \
+              && shasum -a 512 -c <(curl -s https://raw.githubusercontent.com/codecov/codecov-bash/${VERSION}/SHA512SUM)
       - run:
           name: Codecov upload
           command: |
-            bash <(curl -s https://codecov.io/bash)
+            chmod +x codecov
+            ./codecov
       - store_test_results:
           path: ./
   sign_release: