fix: handle go-git extension validation errors gracefully#2970
fix: handle go-git extension validation errors gracefully#2970migmartri merged 3 commits intochainloop-dev:mainfrom
Conversation
go-git v5.17.0 introduced strict repository extension validation (go-git/go-git#1861) with a case-sensitivity bug that rejects the worktreeConfig extension, breaking attestation init in repos using git worktree. Reverts to v5.16.5 and adds defensive handling in gracefulGitRepoHead so unsupported extension errors degrade gracefully instead of failing the attestation. Closes chainloop-dev#2966 Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
Kusari Analysis Results:
No pinned version dependency changes, code issues or exposed secrets detected! Note View full detailed analysis result for more information on the output and the checks that were run.
Found this helpful? Give it a 👍 or 👎 reaction! |
|
Kusari PR Analysis rerun based on - 73b801d performed at: 2026-03-30T22:20:44Z - link to updated analysis |
Switches from string-based error matching to using go-git's exported error variables now that we stay on v5.17.1. Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
|
Kusari PR Analysis rerun based on - 64e9bef performed at: 2026-03-30T22:22:09Z - link to updated analysis |
Summary
gracefulGitRepoHeadso attestation init doesn't fail in repos using git worktreeCloses #2966