From 4e90311165b6cd0912f47ec0de0299d5cd246ab8 Mon Sep 17 00:00:00 2001
From: "sentry[bot]" <39604003+sentry[bot]@users.noreply.github.com>
Date: Tue, 8 Sep 2026 22:48:00 +0000
Subject: [PATCH] fix: strip BOM from authorization token

---
 codecov_cli/helpers/request.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/codecov_cli/helpers/request.py b/codecov_cli/helpers/request.py
index bd1c9a173..947249032 100644
--- a/codecov_cli/helpers/request.py
+++ b/codecov_cli/helpers/request.py
@@ -109,6 +109,7 @@ def get_token_header_or_fail(token: Optional[str]) -> dict:
         raise click.ClickException(
             "Codecov token not found. Please provide Codecov token with -t flag."
         )
+    token = str(token).strip("\ufeff").strip()
     return {"Authorization": f"token {token}"}
 
 
@@ -118,6 +119,7 @@ def get_token_header(token: Optional[str]) -> Optional[dict]:
     """
     if token is None:
         return None
+    token = str(token).strip("\ufeff").strip()
     return {"Authorization": f"token {token}"}