File tree Expand file tree Collapse file tree 1 file changed +4
-3
lines changed Expand file tree Collapse file tree 1 file changed +4
-3
lines changed Original file line number Diff line number Diff line change 2
2
FROM alpine:3.21 as uploader
3
3
USER root
4
4
WORKDIR /tmp
5
- RUN apk -U add gnupg curl
5
+ RUN apk -U add gpg gpg-agent curl
6
6
RUN curl https://keybase.io/codecovsecurity/pgp_keys.asc | gpg --import
7
7
RUN mkdir uploader && \
8
8
mkdir uploader/linux && \
@@ -24,8 +24,9 @@ RUN curl -s -o linux/codecov https://uploader.codecov.io/latest/linu
24
24
curl -s -o windows/codecov.exe.SHA256SUM https://uploader.codecov.io/latest/windows/codecov.exe.SHA256SUM && \
25
25
curl -s -o windows/codecov.exe.SHA256SUM.sig https://uploader.codecov.io/latest/windows/codecov.exe.SHA256SUM.sig
26
26
27
- # This gpg command is required for the next RUN to work. Something about gpg-agent I'd guess, but this seems to resolve it.
28
- RUN gpg --list-keys
27
+ # Not sure why this lock isn't getting cleared, but we need to manually clear
28
+ # this lock or the next RUN will hang indefinitely waiting for it.
29
+ RUN rm /root/.gnupg/public-keys.d/pubring.db.lock
29
30
RUN gpg --verify linux/codecov.SHA256SUM.sig linux/codecov.SHA256SUM && \
30
31
gpg --verify alpine/codecov.SHA256SUM.sig alpine/codecov.SHA256SUM && \
31
32
gpg --verify macos/codecov.SHA256SUM.sig macos/codecov.SHA256SUM && \
You can’t perform that action at this time.
0 commit comments