Merge pull request #288 from securesign/truncate_repo

Truncate files if they exist prior to extraction from archive (sigstore#1245)
securesign · Aug 30, 2024 · a28d63d · a28d63d
2 parents 2656f8c + 3b3b255
commit a28d63d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/repo/repo.go b/pkg/repo/repo.go
@@ -270,7 +270,7 @@ func Uncompress(src io.Reader, dst string) error {
 			}
 		// Write out files
 		case tar.TypeReg:
-			fileToWrite, err := os.OpenFile(target, os.O_CREATE|os.O_RDWR, os.FileMode(header.Mode))
+			fileToWrite, err := os.OpenFile(target, os.O_CREATE|os.O_RDWR|os.O_TRUNC, os.FileMode(header.Mode))
 			if err != nil {
 				return err
 			}