HashiCorp reveals exposure of private code-signing key after Codecov compromise

HashiCorp, a software company making automated cloud deployment tools, has revealed a private code-signing key was exposed thanks to the compromised Codecov script discovered earlier this month.