• Fail GitHub scans on asset errors and drop sync state with its remote (#135)
    ci/woodpecker/tag/docker Pipeline was successful

    unkin-agent released this 2026-10-18 02:33:00 +11:00 | 27 commits to master since this release

    A GitHub release scan that hit a transient asset error still saved the release-list ETag, so the failed asset was never retried. Assets that are corrupt, deleted or truncated upstream fail on every retry, so they must not keep the remote failed.

    • fail the rpm/deb/alpine scan on transient asset fetch, short read or metadata insert errors, so the ETag is not saved and the backoff retry re-derives the asset
    • add provider.ErrInvalidPackage for unparseable packages and 404/410/416 asset downloads; such assets are logged and skipped
    • decide a ranged fetch holds the whole object from Content-Length or the Content-Range total, or a clean EOF when the total is unknown
    • add a NOT VALID cascading FK from the GitHub sync-state tables to remotes

    Reviewed-on: #135
    Co-authored-by: unkin-agent unkin-agent@unkin.net
    Co-committed-by: unkin-agent unkin-agent@unkin.net

    Downloads