Haha, yup. And if you sign an Android app in CI, Codecov might have had access to your signing keys. Good luck changing those.