summaryrefslogtreecommitdiff
path: root/.github/workflows
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@vyos.io>2026-08-12 21:52:35 +0300
committerYuriy Andamasov <yuriy@vyos.io>2026-08-12 21:52:35 +0300
commit0e0ad13beb357b83faffcda48586641ebfd88b7b (patch)
tree85de56c88f6ab7923b1848b4568c65b1174fdca7 /.github/workflows
parentcf580caa3db4b4b1adaa541301d3d9ab8de5323b (diff)
downloadcodecov-0e0ad13beb357b83faffcda48586641ebfd88b7b.tar.gz
codecov-0e0ad13beb357b83faffcda48586641ebfd88b7b.zip
fix: address adversarial-review findings (validate error visibility + portable paste snippets)
- validate.yml: stream curl output directly; the response=$(...) capture under set -euo pipefail swallowed the validation error body on non-2xx (job failed with a bare exit code and no explanation) - AGENTS.md + README.md: quote the ?ref=production endpoint (zsh globs bare ?) and fetch via Accept: application/vnd.github.raw instead of jq + base64 (BSD/GNU base64 flag drift) codecov.yml payload unchanged (byte-frozen to spec Appendix B). T9078: IS-609 🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to '.github/workflows')
-rw-r--r--.github/workflows/validate.yml5
1 files changed, 2 insertions, 3 deletions
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index f6096b0..4741ea8 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -22,8 +22,7 @@ jobs:
- name: Validate codecov.yml structure
run: |
set -euo pipefail
- response=$(curl -sS --fail-with-body -X POST \
+ curl -sS --fail-with-body -X POST \
--connect-timeout 10 --max-time 60 \
--data-binary @codecov.yml \
- https://codecov.io/validate)
- echo "$response"
+ https://codecov.io/validate