Files
Brian Borghei 3736942080 fix(ci): write VirusTotal archive to /tmp to avoid tar self-inclusion
The Create archive for scanning step ran:
  tar czf "claude-skills-${TAG}.tar.gz" ... .
which writes the archive into the same directory it is reading. As tar
streams files, it sees its own output file growing -> exits with code 1
("tar: file changed as we read it") -> bash -e fails the step -> the
actual VirusTotal upload never runs.

This failure has been present on every release since v3 and only
surfaces silently because subsequent steps short-circuit on the error.

Fix: write the archive to /tmp/ so it lives outside the directory tree
being archived. ARCHIVE env var now carries the absolute path; the
Submit to VirusTotal step uses curl --form file=@${ARCHIVE} which
handles absolute paths natively, so no further changes needed.

Verified by inspecting the v4.7.0 run log (26282192959). Will re-run
the workflow on v4.7.0 via workflow_dispatch once this lands.
2026-05-22 12:25:35 +02:00
..
2026-02-21 22:56:44 +01:00