Codecov Bash uploader security notice

Tooling
7

If you could link to the failed workflow run, we could do a better job of diagnosing what went wrong with the codecov action.