From 0b781162996091e8e2efbc99ecc3bef5d23ca0e2 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Tue, 14 Jul 2026 09:33:38 -0400
Subject: [PATCH] fix(release): stream evidence artifact downloads

---
 scripts/release-ci-summary.mjs | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/scripts/release-ci-summary.mjs b/scripts/release-ci-summary.mjs
index 7e9a83cee3b7..09ec4a96f164 100755
--- a/scripts/release-ci-summary.mjs
+++ b/scripts/release-ci-summary.mjs
@@ -5,7 +5,7 @@
  */
 import { execFileSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { closeSync, mkdtempSync, openSync, readFileSync, rmSync, statSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import process from "node:process";
@@ -115,12 +115,15 @@ export function artifactDownloadArgs(artifactId, repository = DEFAULT_REPO) {
 }
 
 function downloadArtifactZip(artifactId, destination, repository = DEFAULT_REPO) {
-  const archive = execFileSync(resolvePlainGhBin(), artifactDownloadArgs(artifactId, repository), {
-    env: plainGhEnv(),
-    maxBuffer: 16 * 1024 * 1024,
-    stdio: ["ignore", "pipe", "pipe"],
-  });
-  writeFileSync(destination, archive);
+  const output = openSync(destination, "w");
+  try {
+    execFileSync(resolvePlainGhBin(), artifactDownloadArgs(artifactId, repository), {
+      env: plainGhEnv(),
+      stdio: ["ignore", output, "pipe"],
+    });
+  } finally {
+    closeSync(output);
+  }
 }
 
 function rate() {