actions/setup-uv
11
0
Fork 0
mirror of https://github.com/astral-sh/setup-uv.git synced 2026-05-15 06:30:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Limit GitHub tokens to github.com download URLs

Browse source
This commit is contained in:
Zsolt Dollenstein 2026-05-11 17:52:04 +01:00
parent 88aa608651
commit 2f9f369997
No known key found for this signature in database
3 changed files with 47 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

11
dist/setup/index.cjs generated vendored
View file

@ -96989,7 +96989,7 @@ async function downloadVersion(platform2, arch3, version3, checksum, githubToken
const resolvedChecksum = manifestUrl === void 0 ? checksum : resolveChecksum(checksum, artifact.checksum);
const mirrorUrl = rewriteToMirror(artifact.downloadUrl);
const downloadUrl = mirrorUrl ?? artifact.downloadUrl;
const downloadToken = mirrorUrl !== void 0 ? void 0 : githubToken;
const downloadToken = githubTokenForUrl(downloadUrl, githubToken);
try {
return await downloadArtifact(
downloadUrl,
@ -97014,7 +97014,7 @@ async function downloadVersion(platform2, arch3, version3, checksum, githubToken
arch3,
version3,
resolvedChecksum,
githubToken
githubTokenForUrl(artifact.downloadUrl, githubToken)
);
}
}
@ -97024,6 +97024,13 @@ function rewriteToMirror(url2) {
}
return ASTRAL_MIRROR_PREFIX + url2.slice(GITHUB_RELEASES_PREFIX.length);
}
function githubTokenForUrl(downloadUrl, githubToken) {
try {
return new URL(downloadUrl).origin === "https://github.com" ? githubToken : void 0;
} catch {
return void 0;
}
}
async function downloadArtifact(downloadUrl, artifactName, platform2, arch3, version3, checksum, githubToken) {
info(`Downloading uv from "${downloadUrl}" ...`);
const downloadPath = await downloadTool(