commit 41aabcbd2326ae154a16a1a050ee01fb9a54bd19
author Alex Gaynor <alex.gaynor@gmail.com> Wed Sep 09 22:16:37 2015 -0400
committer Alex Gaynor <alex.gaynor@gmail.com> Wed Sep 09 22:16:37 2015 -0400
tree ccf75d196d12b27d899ef2c8a45bca406db63682
parent 948ba5d4ff4ee7a8f7554af123e97ab580aa50a2

Don't use pipes

Download the whole file first, @glyph points out that truncation attacks are a thing.

.travis/upload_coverage.sh

diff --git a/.travis/upload_coverage.sh b/.travis/upload_coverage.sh
index 554116f..6248956 100755
--- a/.travis/upload_coverage.sh
+++ b/.travis/upload_coverage.sh
@@ -6,5 +6,6 @@
 NO_COVERAGE_TOXENVS=(pypy pypy3 pep8 py3pep8 docs)
 if ! [[ "${NO_COVERAGE_TOXENVS[*]}" =~ "${TOXENV}" ]]; then
     source ~/.venv/bin/activate
-    bash <(curl -s https://codecov.io/bash) -e TRAVIS_OS_NAME,TOXENV,OPENSSL
+    wget https://codecov.io/bash -O codecov.sh
+    bash codecov.sh -e TRAVIS_OS_NAME,TOXENV,OPENSSL
 fi