Skip to content

[Bug]All assets within the tarball are marked as executable, they should not be. #352

@DanielDewberry

Description

@DanielDewberry

What is the problem?

I have downloaded the linux x86_64 tarball

curl -sLO 'https://github.com/twitchdev/twitch-cli/releases/download/v1.1.24/twitch-cli_1.1.24_Linux_x86_64.tar.gz'

expanded it

tar -xvf twitch-cli_1.1.24_Linux_x86_64.tar.gz 

and noticed that all of the assets contained within have user, group and other executable bits set.

$ find -ls
  6164701      4 drwxrwxr-x   3 daniel   daniel       4096 Jul  7 16:56 .
  6164723   5328 -rw-rw-r--   1 daniel   daniel    5452592 Jul  7 16:56 ./twitch-cli_1.1.24_Linux_x86_64.tar.gz
  6164728      4 drwxrwxr-x   3 daniel   daniel       4096 Jul  7 16:56 ./twitch-cli_1.1.24_Linux_x86_64
  6164751     20 -rwxrwxr-x   1 daniel   daniel      17789 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/THIRD-PARTY
  6164766      4 drwxrwxr-x   2 daniel   daniel       4096 Jul  7 16:56 ./twitch-cli_1.1.24_Linux_x86_64/docs
  6164806      4 -rwxrwxr-x   1 daniel   daniel        164 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/version.md
  6164792      8 -rwxrwxr-x   1 daniel   daniel       7322 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/mock-api.md
  6164788     24 -rwxrwxr-x   1 daniel   daniel      21997 Jan  4  2024 ./twitch-cli_1.1.24_Linux_x86_64/docs/event.md
  6164780      4 -rwxrwxr-x   1 daniel   daniel       1167 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/configure.md
  6164796     12 -rwxrwxr-x   1 daniel   daniel      11211 Apr  3  2024 ./twitch-cli_1.1.24_Linux_x86_64/docs/token.md
  6164776      8 -rwxrwxr-x   1 daniel   daniel       7926 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/api.md
  6164809  12880 -rwxrwxr-x   1 daniel   daniel   13188336 Jul  9  2024 ./twitch-cli_1.1.24_Linux_x86_64/twitch
  6164748      8 -rwxrwxr-x   1 daniel   daniel       4294 Jun 29  2024 ./twitch-cli_1.1.24_Linux_x86_64/README.md
  6164739      4 -rwxrwxr-x   1 daniel   daniel         78 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/NOTICE
  6164734     12 -rwxrwxr-x   1 daniel   daniel      11361 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/LICENSE

Only twitch-cli_1.1.24_Linux_x86_64/twitch and the containing directory should have the executable bits set.

Operating System

Linux

Architecture Version (x86, x64, arm, etc)

X86_64

Steps to reproduce

  1. Download the release tarball
  2. Extract the assets
  3. View the permissions on the assets

Relevant log output

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions