Skip to content

fix: handle duplicate tarball directories - #5165

Open
rowkav09 wants to merge 1 commit into
ossf:mainfrom
rowkav09:fix/idempotent-tarball-directories
Open

fix: handle duplicate tarball directories#5165
rowkav09 wants to merge 1 commit into
ossf:mainfrom
rowkav09:fix/idempotent-tarball-directories

Conversation

@rowkav09

@rowkav09 rowkav09 commented Aug 8, 2026

Copy link
Copy Markdown

What changed

Use idempotent directory creation when extracting GitHub and GitLab tarballs. This handles archives with repeated directory entries and creates missing nested parent directories without changing the existing archive path validation.

Testing

  • git diff --check passed
  • Go tests could not be run because Go is not installed in the local environment

Fixes #5023

Signed-off-by: rowkav09 <rowkav0809@highgateschool.org.uk>
@rowkav09
rowkav09 requested a review from a team as a code owner August 8, 2026 16:18
@rowkav09
rowkav09 requested review from jeffmendoza and spencerschrock and removed request for a team August 8, 2026 16:18
@dosubot dosubot Bot added the size:S This PR changes 10-29 lines, ignoring generated files. label Aug 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:S This PR changes 10-29 lines, ignoring generated files.

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

BUG: tarball extraction fails with "file exists" error when archive contains duplicate directory entries

1 participant