DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove usage of codecov.io for the time being

Browse source 
There was a critical security compromise of the bash script
that was being downloaded as part of the coverage build:

  https://about.codecov.io/security-update/

beginning January 31, 2021, there were periodic, unauthorized
alterations of our Bash Uploader script by a third party, which enabled
them to potentially export information stored in our users' continuous
integration (CI) environments. This information was then sent to a
third-party server outside of Codecov’s infrastructure.

The Bash Uploader is also used in these related uploaders:
Codecov-actions uploader for Github, the Codecov CircleCl Orb, and the
Codecov Bitrise Step (together, the “Bash Uploaders”). Therefore, these
related uploaders were also impacted by this event.

The altered version of the Bash Uploader script could potentially
affect:

Any credentials, tokens, or keys that our customers were passing through
their CI runner that would be accessible when the Bash Uploader script
was executed.  Any services, datastores, and application code that could
be accessed with these credentials, tokens, or keys.  The git remote
information (URL of the origin repository) of repositories using the
Bash Uploaders to upload coverage to Codecov in CI.
This commit is contained in:
Bowei Du 2021-04-30 16:55:58 -07:00
parent 3633677786
commit a1c662a9a8
2 changed files with 0 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
Makefile
View file

@ -137,12 +137,6 @@ print-e2e-suite: e2e-test-binary ## Prints information about the suite of e2e te
@build/run-in-docker.sh \
hack/print-e2e-suite.sh
.PHONY: cover
cover: ## Run go coverage unit tests.
@build/cover.sh
echo "Uploading coverage results..."
@curl -s https://codecov.io/bash | bash
.PHONY: vet
vet:
@go vet $(shell go list ${PKG}/internal/... | grep -v vendor)

1
README.md
View file

@ -4,7 +4,6 @@
# NGINX Ingress Controller
[![Coverage Status](https://codecov.io/gh/kubernetes/ingress-nginx/branch/master/graph/badge.svg)](https://codecov.io/gh/kubernetes/ingress-nginx)
[![Go Report Card](https://goreportcard.com/badge/github.com/kubernetes/ingress-nginx)](https://goreportcard.com/report/github.com/kubernetes/ingress-nginx)
[![GitHub license](https://img.shields.io/github/license/kubernetes/ingress-nginx.svg)](https://github.com/kubernetes/ingress-nginx/blob/master/LICENSE)
[![GitHub stars](https://img.shields.io/github/stars/kubernetes/ingress-nginx.svg)](https://github.com/kubernetes/ingress-nginx/stargazers)