Getting the URL from the response extensions instead of simply using the input URL strips authentication data from the URL. Doing this not only prevents downloading artifacts from a private registry using basic auth, but also causes caching errors when removing a given lock because of the way cache keys are calculated.
Getting the URL from the response extensions instead of simply using the input URL strips authentication data from the URL. Doing this not only prevents downloading artifacts from a private registry using basic auth, but also causes caching errors when removing a given lock because of the way cache keys are calculated.