From 9f0276b9963d1e5a0a577dce43c4642e27fb3f4f Mon Sep 17 00:00:00 2001
From: maksimtech <268127343+maksimtech@users.noreply.github.com>
Date: Tue, 18 Aug 2026 17:08:55 +0000
Subject: [PATCH] fix: use release start timestamp for delta zip filename

The timestamp for the delta filename was captured with new Date()
inside DeltaCommand.run(), which captures the time of execution
rather than the release start time.

If processing crosses an hour boundary, the filename ends up one
hour ahead of the release tag (e.g. tag cve_2026-01-29_0200Z
contains a file named 2026-01-29_delta_CVEs_at_0300Z.zip).

Fix: derive timestamp from options.start (the release start time)
instead of new Date() at execution time.

Fixes #124
---
 src/commands/DeltaCommand.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/commands/DeltaCommand.ts b/src/commands/DeltaCommand.ts
index 3bacee8..02d1cf3 100644
--- a/src/commands/DeltaCommand.ts
+++ b/src/commands/DeltaCommand.ts
@@ -48,7 +48,7 @@ export class DeltaCommand extends GenericCommand {
       deltaFs.writeCves(undefined, `${deltaFilename}.zip`);
       deltaFs.writeTextFile(`release_notes.md`);
     } else {
-      const timestamp = new Date();
+      const timestamp = new Date(options.start);
       const delta = await Git.newDeltaFromGitHistory(options.start);
       // console.log(`delta=${JSON.stringify(delta, null, 2)}`);
       console.log(delta.toText());