artifactapi

Files

T

History

unkinben e7c9387bcc fix: GC has no grace period (TOCTOU with dedup uploads) (#86 )

Fixes #71

## Why
`FindOrphanedBlobs` returned any blob not currently referenced. Because CAS dedups (the blob row can exist before its artifact/local_files row is written), a concurrent upload reusing an existing hash could have its S3 object deleted mid-flight by the GC.

## Changes
- `FindOrphanedBlobs` now takes a `minAge` and only returns blobs with `created_at < now()-minAge`.
- The collector passes a 1h `blobGracePeriod`.

## Validation
- `go test ./internal/gc/...` and `make e2e` pass.

---------

Co-authored-by: BenVincent <benvin@main.unkin.net>
Reviewed-on: #86
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

2026-07-02 22:43:18 +10:00

artifacts.go

fix: GC has no grace period (TOCTOU with dedup uploads) (#86 )

2026-07-02 22:43:18 +10:00

local_files.go

refactor: modular local provider interfaces (#52 )

2026-06-23 22:56:25 +10:00

postgres.go

fix: set timeouts on the upstream HTTP client (#83 )

2026-07-02 22:24:49 +10:00

remotes.go

fix: set timeouts on the upstream HTTP client (#83 )