merklecounty / rget

download URLs and verify the contents against a publicly recorded cryptographic log
https://merklecounty.com
Apache License 2.0
205 stars 17 forks source link

github publish-release-sums: 404 on github API #13

Open philips opened 5 years ago

philips commented 5 years ago

On etcd-io I am getting 404 but I can't reproduce on my other projects...

$ go run ./rget github publish-release-sums https://github.com/etcd-io/etcd/releases/tag/v0.4.0
2019/08/05 12:42:54 You will now be taken to your browser for authentication or open the url below in a browser.
2019/08/05 12:42:54 https://github.com/login/oauth/authorize?access_type=offline&client_id=81b93ee2e0d70958d933&redirect_uri=http%3A%2F%2F127.0.0.1%3A14565%2Foauth%2Fcallback&response_type=code&scope=repo&state=gbA4sxCV
2019/08/05 12:42:54 If you are opening the url manually on a different machine you will need to curl the result url on this machine manually.
2019/08/05 12:42:55 Authentication will be cancelled in 120 seconds
2019/08/05 12:42:59 Shutting down server...
Server gracefully stopped
generated SHA256SUMS:

2c199f3bf2498016ba33a52dd5e05ba54b28d98e7003419285509a9e50a96f56  https://github.com/etcd-io/etcd/releases/download/v0.4.0/etcd-v0.4.0-darwin-amd64.zip
9bd053a4641f7b04d1e9295e356333607e6b1bc2a9ec761a6121ccf7012fbf1a  https://github.com/etcd-io/etcd/releases/download/v0.4.0/etcd-v0.4.0-darwin-amd64.zip.gpg
c0abd104282153acd414528eb23710636685d887ce7373ac7633ebe873f8b370  https://github.com/etcd-io/etcd/releases/download/v0.4.0/etcd-v0.4.0-linux-amd64.tar.gz
391084c18e9417294c3e040e304fa4890bf5d1d0d4327568444e4c417c46e641  https://github.com/etcd-io/etcd/releases/download/v0.4.0/etcd-v0.4.0-linux-amd64.tar.gz.gpg
0df6b7efa67c252a293dbdcbc93e20e0396cc1e7f9399f44e8b24e7632ab7e0c  https://github.com/etcd-io/etcd/releases/download/v0.4.0/etcd-v0.4.0-windows-amd64.zip
bd16e48fbd80413b294de1ed1db575d16f72698c340f897f0d47cb48acc8648e  https://github.com/etcd-io/etcd/releases/download/v0.4.0/etcd-v0.4.0-windows-amd64.zip.gpg
377a2f4abef68b77c6e307ee9bef80885625b08b8afe15933d4b166d65c8b1d8  https://api.github.com/repos/etcd-io/etcd/zipball/v0.4.0
5d4bc5aa1c9bcf73fc5fdb792cf9dd5be7b0b2a9170da35ed7c66202529e0f14  https://api.github.com/repos/etcd-io/etcd/tarball/v0.4.0
0547fcd7a74c2bce500017a7c0ffbbd08cbe6060dfb13845bb6006be90cd112b  https://github.com/etcd-io/etcd/archive/v0.4.0.tar.gz
fd4d37728caed0fdc46e610a9c44b2cfd9ab7a58af093f80a1a45897f2fae6bb  https://github.com/etcd-io/etcd/archive/v0.4.0.zip

POST https://uploads.github.com/repos/etcd-io/etcd/releases/331551/assets?name=SHA256SUMS: 404 Not Found []
exit status 1
philips commented 5 years ago

Huh, just filed a bug with GitHub support. It is even weirder now:

I was trying to upload a file to a release from 2014. I was using a Go API client. And I got a 422 error: https://gist.github.com/philips/07218453f0f1cc3b8bc867cc67fa6468

This is odd because on the releases page the file, SHA256SUMS, isn't listed:
https://github.com/etcd-io/etcd/releases/tag/v0.4.0

But, if you fetch the file it works just fine!
https://github.com/etcd-io/etcd/releases/download/v0.4.0/SHA256SUMS