Could not verify signature. Please contact Codecov if problem continues

[shenxianpeng]

https://github.com/cpp-linter/clang-tools-pip/actions/runs/27226646745/job/80396342135

==> Detected linux
 -> Downloading https://cli.codecov.io/latest/linux/codecov
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  3 10.6M    3  375k    0     0  2294k      0  0:00:04 --:--:--  0:00:04 2291k
100 10.6M  100 10.6M    0     0  40.0M      0 --:--:-- --:--:-- --:--:-- 39.9M
==> Finishing downloading linux:latest
      Version: v11.2.8
 
gpg: directory '/home/runner/.gnupg' created
gpg: keybox '/home/runner/.gnupg/pubring.kbx' created
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
==> Verifying GPG signature integrity
 -> Downloading https://cli.codecov.io/latest/linux/codecov.SHA256SUM
 -> Downloading https://cli.codecov.io/latest/linux/codecov.SHA256SUM.sig
 
gpg: Signature made Tue Apr 21 19:28:03 2026 UTC
gpg:                using RSA key 27034E7FDB850E0BBC2C62FF806BB28AED779869
gpg: Can't check signature: No public key
==> Could not verify signature. Please contact Codecov if problem continues
    Exiting...
Error: Process completed with exit code 1.

[shenxianpeng]

it seems need to upgrade to v7 codecov/codecov-action#1956 (comment)

[shenxianpeng]

it;s really bad regression for such impact proejct

[shenxianpeng]

After the upgrade, it back to work https://github.com/cpp-linter/clang-tools-pip/actions/runs/27227619531/job/80399092660