question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

"Codecov: Uploader shasum does not match uploader hash"

See original GitHub issue

I am facing Codecov: Uploader shasum does not match uploader hash trying to use literaly copy-paste GitHub Action example setup.

 Warning: Unexpected input(s) 'path_to_write_report', valid inputs are ['token', 'files', 'directory', 'flags', 'commit_parent', 'dry_run', 'env_vars', 'fail_ci_if_error', 'file', 'functionalities', 'move_coverage_to_trash', 'name', 'override_branch', 'override_build', 'override_commit', 'override_pr', 'override_tag', 'root_dir', 'slug', 'url', 'verbose', 'working-directory']
Run codecov/codecov-action@v2
  with:
    token: ***
    directory: ./coverage/reports/
    env_vars: OS,PYTHON
    fail_ci_if_error: true
    files: ./coverage.xml
    flags: unittests
    verbose: true
  env:
    OS: windows-latest
    PYTHON: 3.7
    pythonLocation: C:\hostedtoolcache\windows\Python\3.7.9\x64
==> SHASUM file signed by key id 806bb28aed779869
D:\a\_actions\codecov\codecov-action\v2\dist\codecov.exe -n codecov-umbrella -Q github-action-2.0.1 -e OS,PYTHON -Z -f ./coverage1.xml -f ./coverage2.xml -F unittests -s ./coverage/reports/ -v

     _____          _
    / ____|        | |
   | |     ___   __| | ___  ___ _____   __
   | |    / _ \ / _` |/ _ \/ __/ _ \ \ / /
   | |___| (_) | (_| |  __/ (_| (_) \ V /
    \_____\___/ \__,_|\___|\___\___/ \_/

  Codecov report uploader 0.1.0
Error: Codecov: Uploader shasum does not match uploader hash: 
b703b68634be7ee137d78fc3d152598b9ece064482f31964177ae6ea0028a0c0  codecov.exe,  public hash:
80c66284a12e9ada7a8da2f223600e3e4826a7e5e2249887d0859fa5447f1122  codecov.exe

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Reactions:1
  • Comments:11 (6 by maintainers)

github_iconTop GitHub Comments

4reactions
thomasrockhucommented, Jul 21, 2021

This looks like a race condition during release. The SHA it’s comparing to is the latest, but we are pulling a slightly older SHA. It should resolve within the hour, but I’ll work on making sure it doesn’t happen on future releases.

2reactions
Jolg42commented, Aug 10, 2021

Just happened today in this run https://github.com/prisma/prisma/runs/3291354178

==> SHASUM file signed by key id 806bb28aed779869
Error: Codecov: Uploader shasum does not match -- uploader hash: 6434e7d376f412405ba0fc0d2cf6f085312b16160fc5b7972a9008caae1ea9ff  codecov, public hash: d577b7c828ebd0a51ad4b398547d188e839440ac045c686b303c8fe16d2858a6  codecov

Using - uses: codecov/codecov-action@v2

Workflow file here https://github.com/prisma/prisma/blob/main/.github/workflows/test.yml

Read more comments on GitHub >

github_iconTop Results From Across the Web

v2: Codecov: Uploader shasum does not match #586 - GitHub
I've been getting this issue on a few repos lately, and it fails the job. Other jobs in the build pass.
Read more >
Codecov Uploader
Codecov uses a separate upload tool to make it easy to upload coverage reports to Codecov for processing. The Codecov Uploader is a...
Read more >
Not Your Usual Supply Chain Hack: The Codecov Bash ...
Codecov, a tool for uploading environmental data into continuous integration environs, has been compromised.
Read more >
code coverage - Why is codedov not showing the report?
I generate the report using codeception using the "Run Codecept coverage" command. Why on the codecov site I see commits and 100% coverage,...
Read more >
What You Need to Know About the Codecov Incident
The system breach remained undetected for over two months, which is when a Codecov customer alerted the company of a discrepancy between the ......
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found