Open x448 opened 3 years ago
Hi, thanks for reaching out.
HashiCorp is a customer of Codecov and was affected by the security event disclosed at https://about.codecov.io/security-update/. Incident response activities are ongoing, and relevant updates and outcomes will be shared promptly when available via https://discuss.hashicorp.com/c/security.
Thanks for sharing the go library. We'll be taking a look at it and other options.
On April 15, Security Week reported,
Examples: https://github.com/search?q=org%3Ahashicorp+codecov.io%2Fbash&type=code
Projects using Go, like fxamacker/cbor avoided this type of problem for over a year by embedding a simple script to handle code coverage instead of downloading it from a 3rd-party.