From ddf99060e4f33295ec9bbd65c5a501f079856800 Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Mon, 25 May 2026 00:47:14 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by OrbisAI Security --- yazi-cli/src/package/git.rs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/yazi-cli/src/package/git.rs b/yazi-cli/src/package/git.rs index 3d1e85df..01046128 100644 --- a/yazi-cli/src/package/git.rs +++ b/yazi-cli/src/package/git.rs @@ -8,11 +8,11 @@ pub(super) struct Git; impl Git { pub(super) async fn clone(url: &str, path: &Path) -> Result<()> { - Self::exec(|c| c.args(["clone", url]).arg(path)).await + Self::exec(|c| c.args(["clone", "--no-tags", url]).arg(path)).await } pub(super) async fn fetch(path: &Path) -> Result<()> { - Self::exec(|c| c.arg("fetch").current_dir(path)).await + Self::exec(|c| c.args(["fetch", "--no-tags"]).current_dir(path)).await } pub(super) async fn checkout(path: &Path, rev: &str) -> Result<()> {