chore(installer): regenerate dist artifacts to sync embedded bundle with source - #49
Open
lcrowther-snyk wants to merge 1 commit into
Open
Conversation
…ith source The prebuilt installer artifacts under installer/dist/ embedded a stale snapshot of the bundled recipe sources. The Claude async-CLI Secure-at- Inception hook (guardrail_directives/secure_at_inception/hooks_version/claude/async_cli_version/snyk_secure_at_inception.py) was 830 lines in the committed bundle but 841 lines in source: the dist was built from a pre-final version of the source within release 786986d and never regenerated, leaving the source and its own generated artifact internally inconsistent. As a result, installs from this release receive a hook missing the latest changes -- notably the "Newly Introduced Dependency Vulnerabilities" SCA reporting section and the SCA-scan-unavailable fallback. Regenerated snyk-studio-install.{sh,py,ps1} via `python3 installer/build_installer.py`. The large diff is expected: the bundle is a gzipped tar embedded as base64, so the entire payload re-encodes on every build even though the only functional change is the bundled hook content. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Regenerates the prebuilt installer artifacts in
installer/dist/(snyk-studio-install.sh,.py,.ps1) so the embedded bundle matches the current recipe sources.Why
The committed
dist/artifacts embed a stale snapshot of the bundled files. Concretely, the Claude async-CLI Secure-at-Inception hook is out of sync:guardrail_directives/secure_at_inception/hooks_version/claude/async_cli_version/snyk_secure_at_inception.py)f48a57a8…dist/bundleb34f319f…Both the source hook and the dist artifacts were last touched in the same release commit (
786986d), but the dist was built from a pre-final version of the source within that commit and not regenerated before merge — leaving the source and its own generated artifact internally inconsistent.Impact: anyone installing from this release gets a hook missing the latest changes — notably the "Newly Introduced Dependency Vulnerabilities" SCA reporting block and the SCA-scan-unavailable fallback.
git clonedoesn't help, since the installer unpacks the embedded bundle rather than copying the live source file.How
Verified the freshly built bundle's embedded Claude hook now matches source (
f48a57a8…, 841 lines).Note on diff size
The artifacts embed a gzipped tar as base64. Because tar/gzip include file mtimes and a build timestamp, the entire payload re-encodes on every build, so the diff is ~6.5k lines even though the only functional change is the bundled hook content. Reviewers can confirm by re-running the build command above and diffing, or by extracting the bundle and comparing the embedded files to source.
🤖 Generated with Claude Code