rewindex

ChangesCodecovTrust page

Codecov: Trust page changed

Trust / securityChanged (not classified) (rule)Changed about.codecov.io (opens in new tab)
Summary

Codecov’s trust page now specifies Harness-owned rather than Sentry-owned domains for employee accounts. It replaces Sentry.io HackerOne bug bounty participation and invite instructions via security@sentry.io with direct vulnerability reporting to security@codecov.io, changing the published reporting route for customers and security researchers.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

Struck in red is what Codecov removed; blue is what they added. Muted text is unchanged context.

Changed#1
Before: …only accessible via employee specific accounts registered to Sentry-owned domains. All commits to repos that have security…
After: …only accessible via employee specific accounts registered to Harness-owned domains. All commits to repos that have security…
Changed#2
Before: …researchers can identify weaknesses in any technology. Codecov participates in the Sentry.io HackerOne bug bounty program. You may request an invite by sending an email to security@sentry.io you’ve found a security vulnerability in Codecov’s service,…
After: …researchers can identify weaknesses in any technology. Codecov welcomes reports from security researchers. If you believe you’ve found a security vulnerability in Codecov’s service,…
Changed#3
Before: …believe you’ve found a security vulnerability in Codecov’s service. and we will ensure that your findings get…
After: …believe you’ve found a security vulnerability in Codecov’s service, please email security@codecov.io with the details, and we will ensure that your findings get…
Changed#4
Before: …get passed along to the security team for remediation if Follow this repo to get the latest security…
After: …get passed along to the security team for remediation. Follow this repo to get the latest security…

1 noise-only block(s) hidden (dates, counters, testimonials, tokens).

Compared with the previous archived version (#458 to #11196). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this page

Friday, October 30

1 page change

Cite this

Trust page changed on Codecov’s Trust page, changed 2026-10-30 08:44 UTC (change 1 of 1).

Title
Trust page changed
Vendor
Codecov
Date
URL
https://rewindex.com/change/p11196

All Codecov changesCodecov profileMarkdownJSON