False positives in store Info API inspector
Metadata
Current evaluation
False positives in the store Info API inspector rejecting valid xz archives were resolved in pull request #477. Artifact detection heuristics were adjusted to correctly handle non-tar xz files and prevent unnecessary rejections.
Suggested action: —
No scores available.
Issue body
### Bug Description
The store info API also validates bld bin binaries, and rejects files that are xz archives but not tarballs. Additionally, rejections can be toned down in artifact detection heuristics to prevent other false positives with JSON responses with similar schemes (it can ignore the artifact instead of rejecting it outright).
### To Reproduce
Download xzipped DEP-11 metadata files through the fetch service, and they will be rejected by the info inspector. Example: http://archive.ubuntu.com/ubuntu/dists/noble/multiverse/dep11/by-hash/SHA256/5261230a7badaa5d817d890a1b91ffbc184578e7ad32b308f8799b5c96c0315a
### Relevant log output
```json
"response-inspection": {
"store.info-api": {
"opinion": "Rejected",
"reason": "error inspecting artifact",
"annotations": {
"error-message": "archive/tar: invalid tar header"
}
}
},
```
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | False positives in the store Info API inspector rejecting valid xz archives were resolved in pull request #477. Artifact detection heuristics were adjusted to correctly handle non-tar xz files and prevent unnecessary rejections. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #477 fix: false positive in store info inspection | fetch-service | merged | Merged fix for false positives in store info inspection. Adjusts bld bin validation to accept non-tarball xz archives and relaxes artifact detection heuristics for JSON responses. Approved by three reviewers and passed all CI checks. |