Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insecure download blocked #265

Open
remarkablemark opened this issue Dec 16, 2024 · 0 comments
Open

Insecure download blocked #265

remarkablemark opened this issue Dec 16, 2024 · 0 comments

Comments

@remarkablemark
Copy link

remarkablemark commented Dec 16, 2024

As a user, I want to download the butler binary so that I can use the CLI tool.

Expected

Butler binary can be downloaded via https://broth.itch.ovh/butler/linux-amd64/LATEST/archive/default

Actual

Butler binary cannot be downloaded due to:

Insecure download blocked

Screenshot 2024-12-16 at 6 44 24 PM

It looks like the proxy is redirecting from HTTPS to HTTP protocol. This downgrade impacts CI workflows as it can cause GitHub Actions to fail with:

Redirect from HTTPS to HTTP protocol. This downgrade is not allowed for security reasons. If you want to allow this behavior, set the allowRedirectDowngrade option to true.

See remarkablegames/setup-butler#210

Steps to Reproduce

Browser

  1. Open Chrome and paste link and hit Enter: https://broth.itch.ovh/butler/linux-amd64/LATEST/archive/default

CI

  1. Create a GitHub Action workflow using remarkablegames/setup-butler (the action was updated to use HTTP instead of HTTPS)
remarkablemark added a commit to remarkablegames/setup-butler that referenced this issue Dec 16, 2024
```
Redirect from HTTPS to HTTP protocol. This downgrade is not allowed for
security reasons. If you want to allow this behavior, set the
allowRedirectDowngrade option to true.
```

See itchio/butler#265
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant