fix(plugin): do not call GitHub content API for releases and tags (aq…

…uasecurity#7274) Signed-off-by: knqyf263 <[email protected]>
afdesk · Jul 31, 2024 · b3ee6da · b3ee6da
1 parent 35c60f0
commit b3ee6da
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/downloader/download.go b/pkg/downloader/download.go
@@ -154,7 +154,8 @@ func (t *CustomTransport) RoundTrip(req *http.Request) (*http.Response, error) {
 func NewGitHubTransport(u *url.URL, insecure bool, token string) http.RoundTripper {
 	client := newGitHubClient(insecure, token)
 	ss := strings.SplitN(u.Path, "/", 4)
-	if len(ss) < 4 || strings.HasPrefix(ss[3], "archive/") {
+	if len(ss) < 4 || strings.HasPrefix(ss[3], "archive/") || strings.HasPrefix(ss[3], "releases/") ||
+		strings.HasPrefix(ss[3], "tags/") {
 		// Use the default transport from go-github for authentication
 		return client.Client().Transport
 	}