-
Notifications
You must be signed in to change notification settings - Fork 6.3k
fix(security): tar vulnerability #4085
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Codecov Report
Merging #4085 (b4dff04) into jsjoeio-fix-revert-docs (5c47c3e) will not change coverage.
The diff coverage isn/a
.
❗ Current head b4dff04 differs from pull request most recent head a24e8f5. Consider uploading reports for the commit a24e8f5 to get more accurate results
Impacted file tree graph
@@ Coverage Diff @@ ## jsjoeio-fix-revert-docs #4085 +/- ## ======================================================== Coverage 64.12% 64.12% ======================================================== Files 36 36 Lines 1873 1873 Branches 379 379 ======================================================== Hits 1201 1201 Misses 571 571 Partials 101 101
Continue to review full report at Codecov.
Legend - Click here to learn more
Δ = absolute <relative> (impact)
,ø = not affected
,? = missing data
Powered by Codecov. Last update 5c47c3e...a24e8f5. Read the comment docs.
✨ Coder.com for PR #4085 deployed! It will be updated on every commit.
- Host: https://codercom-jezpd1mgw-codercom.vercel.app/docs/code-server
- Last deploy status: success
- Commit: b4dff04
- Workflow status: https://github.com/cdr/code-server/actions/runs/1191806962
@jsjoeio I believe this may be outdated as we no longer need tar for extensions in an upcoming fork clean up PR
@jsjoeio I believe this may be outdated as we no longer need tar for extensions in an upcoming fork clean up PR
Sweet! I wonder when that will land though? If we have PRs coming in before that, should we fix this sooner?
(though looks like something is still failing)
b4dff04
to
a24e8f5
Compare
This PR is based off of #4071 and fixes a
tar
vulnerability.