resolveURL: HEAD method not universally supported on .git URLs #33

New issue

Open

opened 2026-05-04 17:07:59 +02:00 by heiko · 0 comments

heiko commented

2026-05-04 17:07:59 +02:00

Owner

Problem

resolveURL uses http.MethodHead to probe the clone URL for redirects. Some git forges return 404 or 405 for HEAD on .git URLs even when GET would redirect correctly. If that happens, resolveURL returns the original URL and git then encounters the redirect itself — and fails because it strips embedded credentials on cross-host redirects.

Suggested fix

Use http.MethodGet with an immediate body close instead of HEAD. Less efficient but more broadly compatible.

Identified by AI code review (Claude Sonnet 4.6)

## Problem `resolveURL` uses `http.MethodHead` to probe the clone URL for redirects. Some git forges return 404 or 405 for HEAD on `.git` URLs even when GET would redirect correctly. If that happens, `resolveURL` returns the original URL and git then encounters the redirect itself — and fails because it strips embedded credentials on cross-host redirects. ## Suggested fix Use `http.MethodGet` with an immediate body close instead of HEAD. Less efficient but more broadly compatible. --- *Identified by AI code review (Claude Sonnet 4.6)*

heiko added the

Kind/Bug

label

2026-05-04 17:07:59 +02:00