refactor(spaceship): make tarball extraction safe · ignite/apps@db37768

Triggered via pull request February 6, 2026 02:07

Pantani

opened #251

fix/spaceship-tarball

Status Success

Total duration 10m 47s

Artifacts –

test-lint.yml

on: pull_request

10 errors and 1 warning

ssh.SSH.UploadFile calls io.Copy, which eventually calls lzma.Reader.Read

debug.main calls fmt.Fprintln, which eventually calls lzma.Properties.String

tarball.ExtractData calls archiver.Archive.Extract, which eventually calls lzma.Properties.Code

tarball.ExtractData calls archiver.Archive.Extract, which eventually calls lzma.NewReader

ssh.SSH.UploadFile calls io.Copy, which eventually calls lzma.DecodeDictCap

ssh.SSH.UploadFile calls io.Copy, which eventually calls lzma.ByteReader

tarball.init calls archiver.init, which eventually calls hash.init

ssh.SSH.UploadFile calls io.Copy, which eventually calls hash.CyclicPoly.RollByte

ssh.SSH.Connect calls goph.NewUnknown, which eventually calls agent.agentKeyringSigner.SignWithAlgorithm

ssh.SSH.Connect calls goph.NewUnknown, which eventually calls agent.agentKeyringSigner.Sign

Restore cache failed: Dependencies file is not found in /home/runner/work/apps/apps. Supported file pattern: go.sum