Repository navigation
[bug] download incomplete but no error reported #454
Description
What happened?
download-artifact produced incomplete local file without any error, leading to unexpected EOF when trying to extract it later.
Output of download-artifact is also incomplete:
Downloading single artifact
Preparing to download the following artifacts:
- ozone-bin (ID: 4921437775, Size: 369880567, Expected Digest: sha256:1fa073c25218d640cda793a4c0a3469bea18d0e11d6027e8a1cceac49fac2887)
Redirecting to blob download url: https://productionresultssa1.blob.core.windows.net/actions-results/39de0b12-4433-4f06-84af-aae5d78a7002/workflow-job-run-09bb078a-7c2b-5f7f-8ce5-11d41636665d/artifacts/5d7a69414349a61fd8bc6101b31f1df04c33d9c802e42b43b748be2a1aa58563.zip
Starting download of artifact to: /home/runner/work/ozone/ozone
(node:2157) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.
(Use `node --trace-deprecation ...` to show where the warning was created)
Successful download of the same artifact in other jobs of the same workflow:
Downloading single artifact
Preparing to download the following artifacts:
- ozone-bin (ID: 4921437775, Size: 369880567, Expected Digest: sha256:1fa073c25218d640cda793a4c0a3469bea18d0e11d6027e8a1cceac49fac2887)
Redirecting to blob download url: https://productionresultssa1.blob.core.windows.net/actions-results/39de0b12-4433-4f06-84af-aae5d78a7002/workflow-job-run-09bb078a-7c2b-5f7f-8ce5-11d41636665d/artifacts/5d7a69414349a61fd8bc6101b31f1df04c33d9c802e42b43b748be2a1aa58563.zip
Starting download of artifact to: /home/runner/work/ozone/ozone
(node:2148) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.
(Use `node --trace-deprecation ...` to show where the warning was created)
SHA256 digest of downloaded artifact is 1fa073c25218d640cda793a4c0a3469bea18d0e11d6027e8a1cceac49fac2887
Artifact download completed successfully.
Total of 1 artifact(s) downloaded
Download artifact has finished successfully
What did you expect to happen?
Finish successfully or fail the step.
How can we reproduce it?
N/A, the network issue itself seems to be intermittent.
Anything else we need to know?
No response
What version of the action are you using?
v4
What are your runner environments?
linux
Are you on GitHub Enterprise Server? If so, what version?
No response
Activity
build(ci): skip redundant native builds in CI
build(ci): skip redundant native builds in CI
oxve commentedon Feb 17, 2026
I am also running into this. I have 10 parallel jobs that download the same artifact. Sometimes one of the jobs will fail to extract the file.
The log for the two is different. The failed download does not show the digest of the downloaded artifact but it does not report any failures.
Success:
Failure:
mmuth commentedon Apr 17, 2026
This caused a major production incident for us today.
We considered adding more hash/fingerprinting/validations around it - however it is for sure much more helpful if the action itself does it and ensures reliability.
kgrupp commentedon May 8, 2026
And again we run into the same issue.
AndreyDodonov-EH commentedon May 13, 2026
The actual issue might be in underlying https://github.com/actions/toolkit/
I created a PR with some hardening over there actions/toolkit#2406
ci: verify artifact checksum before extracting to catch truncated dow…
ci: verify artifact checksum before extracting to catch truncated dow…
ci: verify artifact checksum before extracting to catch truncated dow…