twitch-cli icon indicating copy to clipboard operation
twitch-cli copied to clipboard

[Bug]All assets within the tarball are marked as executable, they should not be.

Open DanielDewberry opened this issue 5 months ago • 0 comments

What is the problem?

I have downloaded the linux x86_64 tarball

curl -sLO 'https://github.com/twitchdev/twitch-cli/releases/download/v1.1.24/twitch-cli_1.1.24_Linux_x86_64.tar.gz'

expanded it

tar -xvf twitch-cli_1.1.24_Linux_x86_64.tar.gz 

and noticed that all of the assets contained within have user, group and other executable bits set.

$ find -ls
  6164701      4 drwxrwxr-x   3 daniel   daniel       4096 Jul  7 16:56 .
  6164723   5328 -rw-rw-r--   1 daniel   daniel    5452592 Jul  7 16:56 ./twitch-cli_1.1.24_Linux_x86_64.tar.gz
  6164728      4 drwxrwxr-x   3 daniel   daniel       4096 Jul  7 16:56 ./twitch-cli_1.1.24_Linux_x86_64
  6164751     20 -rwxrwxr-x   1 daniel   daniel      17789 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/THIRD-PARTY
  6164766      4 drwxrwxr-x   2 daniel   daniel       4096 Jul  7 16:56 ./twitch-cli_1.1.24_Linux_x86_64/docs
  6164806      4 -rwxrwxr-x   1 daniel   daniel        164 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/version.md
  6164792      8 -rwxrwxr-x   1 daniel   daniel       7322 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/mock-api.md
  6164788     24 -rwxrwxr-x   1 daniel   daniel      21997 Jan  4  2024 ./twitch-cli_1.1.24_Linux_x86_64/docs/event.md
  6164780      4 -rwxrwxr-x   1 daniel   daniel       1167 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/configure.md
  6164796     12 -rwxrwxr-x   1 daniel   daniel      11211 Apr  3  2024 ./twitch-cli_1.1.24_Linux_x86_64/docs/token.md
  6164776      8 -rwxrwxr-x   1 daniel   daniel       7926 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/docs/api.md
  6164809  12880 -rwxrwxr-x   1 daniel   daniel   13188336 Jul  9  2024 ./twitch-cli_1.1.24_Linux_x86_64/twitch
  6164748      8 -rwxrwxr-x   1 daniel   daniel       4294 Jun 29  2024 ./twitch-cli_1.1.24_Linux_x86_64/README.md
  6164739      4 -rwxrwxr-x   1 daniel   daniel         78 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/NOTICE
  6164734     12 -rwxrwxr-x   1 daniel   daniel      11361 Dec 22  2023 ./twitch-cli_1.1.24_Linux_x86_64/LICENSE

Only twitch-cli_1.1.24_Linux_x86_64/twitch and the containing directory should have the executable bits set.

Operating System

Linux

Architecture Version (x86, x64, arm, etc)

X86_64

Steps to reproduce

  1. Download the release tarball
  2. Extract the assets
  3. View the permissions on the assets

Relevant log output


DanielDewberry avatar Jul 07 '25 16:07 DanielDewberry