[Release] Missing Alpine codecovcli binary releases integrity check signatures
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 89
- Forks
- 64
- PR merge metrics
- No merged PRs in 30d
Description
Previously, Alpine codecovcli binaries were distributed at cli.codecov.io/${CODECOV_CLI_VERSION}/alpine/ along with the checksums and signatures.
However, the directory structure of cli.codecov.io has changed recently, and the Alpine binaries aren't uploaded since v11.
Alpine codecovcli binaries are still available as GitHub Release assets, but there are no checksums or signatures. (Only signatures for sentry-prevent-cli are uploaded.)
Please consider making integrity-check signatures for Alpine codecovcli binary releases available again.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the GitHub Release assets for codecovcli and comparing them with the existing sentry-prevent-cli signature assets and the old cli.codecov.io/${CODECOV_CLI_VERSION}/alpine/ layout. Done means Alpine codecovcli binaries are published with checksums and integrity signatures that can be independently verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux, python
- Domain
- release, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100