Our CI has started failing just today with an unusual error about codeclimate-action

[dep]

In a different build, we got a different error:

Run paambaati/[email protected]
Error: Error during parsing. This message / key probably does not conform to a valid OpenPGP format.
/home/runner/work/_actions/paambaati/codeclimate-action/v3.2.0/node_modules/openpgp/dist/node/openpgp.min.js:2
Error: 🚨 CC Reporter GPG signature verfication failed!
"use strict";const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};Object.defineProperty(exports,"__esModule",{value:!0});var t=require("buffer"),r=require("stream"),i=require("crypto"),n=require("zlib"),a=require("os"),s=require("util"),o=require("asn1.js");function c(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var 

[paambaati]

@dep I'm investigating this issue currently; to rule out expired/wrong keys being served by CodeClimate, can you set verifyDownload to false and re-run the action?

steps:
  - name: Test & publish code coverage
    uses: paambaati/[email protected]
    env:
      CC_TEST_REPORTER_ID: <code_climate_reporter_id>
+    with:
+      verifyDownload: false

[paambaati]

And just to be extra sure, I've also written integration tests to these exact processes (verifying checksum and GPG signatures of the downloaded reporter executable) and can confirm that they do work fine. You can track that in #657 and see CI results in https://github.com/paambaati/codeclimate-action/actions/runs/4498281907.

[paambaati]

Closing due to inactivity.