codecov security breach
layik opened this issue · 3 comments
Robinlovelace commented
What's the action? Change GitHub keys?
layik commented
Their doc is long! I believe so. I will start removing codecov from GH and old Travis. I put it here to get some Rstats and maybe rOpenSci short bullet point action(s).
Sorry Robin can't save you time. Edit: just got the email myself.
Pasting their bold para:
We strongly recommend affected users immediately re-roll all of their credentials, tokens, or keys located in the environment variables in their CI processes that used one of Codecov’s Bash Uploaders.
agila5 commented
I think we can close. See r-lib/covr#470