Also you have to do that every time you run it (or pin hashes) — the codecov uploader was fine for a long time before that changed.