butler icon indicating copy to clipboard operation
butler copied to clipboard

Insecure download blocked

Open remarkablemark opened this issue 1 year ago • 0 comments

As a user, I want to download the butler binary so that I can use the CLI tool.

Expected

Butler binary can be downloaded via https://broth.itch.ovh/butler/linux-amd64/LATEST/archive/default

Actual

Butler binary cannot be downloaded due to:

Insecure download blocked

Screenshot 2024-12-16 at 6 44 24 PM

It looks like the proxy is redirecting from HTTPS to HTTP protocol. This downgrade impacts CI workflows as it can cause GitHub Actions to fail with:

Redirect from HTTPS to HTTP protocol. This downgrade is not allowed for security reasons. If you want to allow this behavior, set the allowRedirectDowngrade option to true.

See https://github.com/remarkablegames/setup-butler/pull/210

Steps to Reproduce

Browser

  1. Open Chrome and paste link and hit Enter: https://broth.itch.ovh/butler/linux-amd64/LATEST/archive/default

CI

  1. ~~Create a GitHub Action workflow using remarkablegames/setup-butler~~ (the action was updated to use HTTP instead of HTTPS)

remarkablemark avatar Dec 16 '24 23:12 remarkablemark