Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verify etag hashes on download / cache hit #64

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Conversation

grahamc
Copy link
Member

@grahamc grahamc commented Sep 5, 2024

Description

I've heard a report that a user seems to have a plausibly corrupt nix installer in the cache. This change checks the downloaded file and the file from the cache.

Checklist
  • Tested changes against a test repository
  • Added or updated relevant documentation (leave unchecked if not applicable)
  • (If this PR is for a release) Updated README to point to the new tag (leave unchecked if not applicable)

Copy link

netlify bot commented Sep 5, 2024

Deploy Preview for detsys-ts-docs ready!

Name Link
🔨 Latest commit 569dbd7
🔍 Latest deploy log https://app.netlify.com/sites/detsys-ts-docs/deploys/66da12dab28489000903949f
😎 Deploy Preview https://deploy-preview-64--detsys-ts-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

src/s3-md5.ts Outdated
actionsCore.info(
`Verifying etag failed: etag mismatch. Wanted ${expectedEtag}, got ${actualEtag}`,
);
return "corrupt";
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not a huge fan of returning strings that we need to compare against... can we rename this to isEtagValid and have it instead return a boolean?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants