Error validating uploader: Signed digest did not match

[Tarcontar]

Hi, I am running my action on a windows self-hosted runner. As of today the code coverage report fails on upload due to this error:

Other workflows running on ubuntu-latest still work as expected.

I tried to update the token for uploading to codecov but that did not help.

[mitchell-codecov]

Thanks for the report, @Tarcontar.

Do you have a link to the workflow that screenshot was taken from?

[Tarcontar]

Hi, sorry but the affected repository is private. After waiting some hours and restarting the workflow multiple times it now works again. Not sure what caused this though.

name: CI

on:
  push:
    branches: [ main, develop, Features/*, Releases/* ]
  pull_request:
    branches: [ main, develop, Features/*, Releases/* ]

jobs:
  build:

    runs-on: self-hosted

    steps:
    - uses: actions/checkout@v3
    - name: Setup .NET
      uses: actions/setup-dotnet@v2
      with:
        dotnet-version: 5.0.x
    - name: Restore dependencies
      run: dotnet restore /p:Platform=x64
    - name: Build
      run: dotnet build /p:Platform=x64 --configuration Debug --no-restore
    - name: Test
      run: dotnet test /p:Platform=x64 --configuration Debug --logger "junit;LogFilePath=..\test_results\{assembly}-test-result.xml" --collect:"XPlat Code Coverage" --results-directory test_results --no-build --verbosity normal
      
    - name: Publish Unit Test Results
      uses: EnricoMi/publish-unit-test-result-action/composite@v1
      if: always()
      with: 
        files: |
          test_results/**/*.xml
          !test_results/**/coverage.cobertura.xml
        
    - name: Upload coverage
      uses: codecov/codecov-action@v2
      with:
        token: ${{ secrets.CODECOV_TOKEN }}

[RainbowMango]

Here is a workflow that met the same issue: https://github.com/karmada-io/karmada/actions/runs/4199861346/jobs/7285350909

==> linux OS detected
https://uploader.codecov.io/latest/linux/codecov.SHA256SUM
Received SHA256SUM dcaddc691f835ba8ede36543aa97d9[34](https://github.com/karmada-io/karmada/actions/runs/4199861346/jobs/7285350909#step:5:35)697df3c40a24d15f8c2419550562cc85  codecov
Received SHA256SUM signature -----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEJwNOf9uFDgu8LGL/gGuyiu13mGkFAmPuYsYACgkQgGuyiu13
mGn5PQ//RI9iwWNANzlN6IVk5DZ0ZSK4H9OBzUbkoZenHwe/45h3uUFqiv40PUHG
nVMTDBwk9ygmSKJ5LgOC[35](https://github.com/karmada-io/karmada/actions/runs/4199861346/jobs/7285350909#step:5:36)4/SKBBdeuEpex0RA4+Wc/K6dDblmvgYVLt4iAG+scy
tKwowB[42](https://github.com/karmada-io/karmada/actions/runs/4199861346/jobs/7285350909#step:5:43)AHMGJeaBXDJa2nc7AtaQEXw8tlfcZBgZhzdipsjV2fq9/muZF0BtaWCf
Cn80eoSvIhrPvaJ+8i5tYQPi5jPD54isRpcQB8piVjGXcvlrh5CE3V1L6kijSRti
BK8Ox+6/TR5xgesuriFfNOD/92yXuRJ8HrS8dmHChDLt++LjMSsCcDG3mpU3qlnh
1Ao5aJrNcxLVyYAjQ7MXIOuNy3dw0NjnHSVKk/UIbk6tHS/tYDiwRCNx+ssVuUW/
v96uR2qfs2Zb+qfz4QeM6Zfl9i7ZnTNh2QCGCjmSz04m/szjUVjJ6[43](https://github.com/karmada-io/karmada/actions/runs/4199861346/jobs/7285350909#step:5:44)cVu00IkL+
EDopq16KOQIzJlOqk7oU0tv5YaVnDD51trGOAqAMjmriDvVRK5aVMCPPaDpSDddv
sK4lhJyv4CBv5kFDfwlBRbceEhYPO5tuXj+Udk9UFvGMaV19VrJSsOwJ1SxrdAYU
ZZF71yIfX9CxqpeSalTKz7cY8IqQmV94pvMrth9EuJucFlDPZlBLNSkLXfpXSUZu
Bmi+RRvqkiDdKW4OIAzwgyVfzpFsKp0hvErbrA8BNi90MrzYtbQ=
=7ZqW
-----END PGP SIGNATURE-----

Error: Codecov: Error validating uploader: Signed digest did not match

[simlecode]

https://github.com/filecoin-project/venus-auth/actions/runs/4200933577/jobs/7287600466

Run codecov/codecov-action@v2
  with:
    files: ./coverage.txt
    flags: unittests
    name: venus-auth
    fail_ci_if_error: true
    verbose: true
  env:
    GOROOT: /opt/hostedtoolcache/go/1.18.10/x64
==> linux OS detected
https://uploader.codecov.io/latest/linux/codecov.SHA[2](https://github.com/filecoin-project/venus-auth/actions/runs/4200933577/jobs/7287600466#step:12:2)[5](https://github.com/filecoin-project/venus-auth/actions/runs/4200933577/jobs/7287600466#step:12:5)[6](https://github.com/filecoin-project/venus-auth/actions/runs/4200933577/jobs/7287600466#step:12:6)SUM
Error: Codecov: Error validating uploader: Signed digest did not match

[eigenein]

Same for me here https://github.com/eigenein/protobuf/actions/runs/4203985585/jobs/7294058670 and it's flaky

[Andy-Grigg]

Same issue here as well: https://github.com/pyansys/openapi-common/actions/runs/4204067410/jobs/7294244608

Re-running the failed job fixed it.

[bvdmitri]

Same here https://github.com/biaslab/RxInfer.jl/actions/runs/4203989985/jobs/7294096169

[thomasrockhu-codecov]

Sorry about that all. We had an issue with a cached version that should be resolved now.