Codecov uses my account for reports on a repo I don't own

Description

Codecov is using my github username to publish reports for a repo I’ve never committed and on an organization I’m not part of. I initially thought a private token I created has been leaked so I went to remove it and generate a new one, but the issue persists. I’m not sure why but it happens only for the same repo.

Here are examples:

Any idea how to resolve this?

Hi @tleunen

Sorry for the delay in responding here, we were confirming this was not a security issue. This has has been fixed and should no longer be happening, can you please confirm?

Time will tell :wink:
Thank you from fixing it!

1 Like