Codecov

wikipedia:Codecov

Security issue

Around April 2021, a supply chain attack using code auditing tool codecov allowed hackers limited access to HashiCorp's customers networks. As a result private credentials were leaked. HashiCorp revoked a private signing key and asked its customers to use a new rotated key.

Related

• SLSA
• Sentry
• Sourcegraph

See also

• SLSA, slsa-verifier
• Sentry, sentry-cli, Sentry self hosted, Sentry Connect Services, Kubernetes, sentry backup, Codecov

"HashiCorp revoked private key exposed in Codecov security breach". VentureBeat. 2021-04-27. Retrieved 2021-08-03.