Skip to content

[Bug]All assets within the tarball are marked as executable, they should not be. #352

Description

@DanielDewberry

What is the problem?

I have downloaded the linux x86_64 tarball

curl -sLO 'https://github.com/twitchdev/twitch-cli/releases/download/v1.1.24/twitch-cli_1.1.24_Linux_x86_64.tar.gz'

expanded it

tar -xvf twitch-cli_1.1.24_Linux_x86_64.tar.gz 

and noticed that all of the assets contained within have user, group and other executable bits set.

$ find -ls
6164701 4 drwxrwxr-x 3 daniel daniel 4096 Jul 7 16:56 .
6164723 5328 -rw-rw-r-- 1 daniel daniel 5452592 Jul 7 16:56 ./twitch-cli_1.1.24_Linux_x86_64.tar.gz
6164728 4 drwxrwxr-x 3 daniel daniel 4096 Jul 7 16:56 ./twitch-cli_1.1.24_Linux_x86_64
6164751 20 -rwxrwxr-x 1 daniel daniel 17789 Dec 22 2023 ./twitch-cli_1.1.24_Linux_x86_64/THIRD-PARTY
6164766 4 drwxrwxr-x 2 daniel daniel 4096 Jul 7 16:56 ./twitch-cli_1.1.24_Linux_x86_64/docs
6164806 4 -rwxrwxr-x 1 daniel daniel 164 Dec 22 2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/version.md
6164792 8 -rwxrwxr-x 1 daniel daniel 7322 Dec 22 2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/mock-api.md
6164788 24 -rwxrwxr-x 1 daniel daniel 21997 Jan 4 2024 ./twitch-cli_1.1.24_Linux_x86_64/docs/event.md
6164780 4 -rwxrwxr-x 1 daniel daniel 1167 Dec 22 2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/configure.md
6164796 12 -rwxrwxr-x 1 daniel daniel 11211 Apr 3 2024 ./twitch-cli_1.1.24_Linux_x86_64/docs/token.md
6164776 8 -rwxrwxr-x 1 daniel daniel 7926 Dec 22 2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/api.md
6164809 12880 -rwxrwxr-x 1 daniel daniel 13188336 Jul 9 2024 ./twitch-cli_1.1.24_Linux_x86_64/twitch
6164748 8 -rwxrwxr-x 1 daniel daniel 4294 Jun 29 2024 ./twitch-cli_1.1.24_Linux_x86_64/README.md
6164739 4 -rwxrwxr-x 1 daniel daniel 78 Dec 22 2023 ./twitch-cli_1.1.24_Linux_x86_64/NOTICE
6164734 12 -rwxrwxr-x 1 daniel daniel 11361 Dec 22 2023 ./twitch-cli_1.1.24_Linux_x86_64/LICENSE

Only twitch-cli_1.1.24_Linux_x86_64/twitch and the containing directory should have the executable bits set.

Operating System

Linux

Architecture Version (x86, x64, arm, etc)

X86_64

Steps to reproduce

  1. Download the release tarball
  2. Extract the assets
  3. View the permissions on the assets

Relevant log output

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions