diff --git a/step.sh b/step.sh index 7fc56000..54ee30de 100755 --- a/step.sh +++ b/step.sh @@ -56,11 +56,11 @@ QKWiWJQF/XopkXwkyAYpyuyRMZ77oF7nuqLFnl5VVEiRo0Fwu45erebc6ccSwYZU -----END PGP PUBLIC KEY BLOCK-----" # Download and verify Codecov uploader -echo "${CODECOV_PUBLIC_PGP_KEY}" | gpg --no-default-keyring --keyring trustedkeys.kbx --import # One-time step +echo "${CODECOV_PUBLIC_PGP_KEY}" | gpg --no-default-keyring --import # One-time step curl -Os "https://uploader.codecov.io/${VERSION}/${OS}/codecov" curl -Os "https://uploader.codecov.io/${VERSION}/${OS}/codecov.SHA256SUM" curl -Os "https://uploader.codecov.io/${VERSION}/${OS}/codecov.SHA256SUM.sig" -gpgv codecov.SHA256SUM.sig codecov.SHA256SUM +gpg --verify codecov.SHA256SUM.sig codecov.SHA256SUM shasum -a 256 -c codecov.SHA256SUM chmod +x codecov