Skip to content

Commit

Permalink
Use HTTPS instead of HTTP to resolve dependencies
Browse files Browse the repository at this point in the history
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <[email protected]>
  • Loading branch information
JLLeitschuh authored and slovdahl committed Jan 26, 2024
1 parent 02a4a5c commit 426740e
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -356,16 +356,16 @@
<repositories>
<repository>
<id>oss.sonatype.org</id>
<url>http://oss.sonatype.org/content/repositories/releases</url>
<url>https://oss.sonatype.org/content/repositories/releases</url>
</repository>
<repository>
<id>oss.sonatype.org-snapshot</id>
<url>http://oss.sonatype.org/content/repositories/snapshots</url>
<url>https://oss.sonatype.org/content/repositories/snapshots</url>
</repository>
<!-- <repository>
<id>scala-tools.org</id>
<name>Scala-Tools Maven2 Repository</name>
<url>http://scala-tools.org/repo-releases</url>
<url>https://scala-tools.org/repo-releases</url>
</repository> -->
<repository>
<id>jboss</id>
Expand All @@ -374,11 +374,11 @@
<repository>
<id>codehaus</id>
<name>repository.codehaus.org</name>
<url>http://repository.codehaus.org</url>
<url>https://repository.codehaus.org</url>
</repository>
<repository>
<id>codehaus-snapshots</id>
<url>http://snapshots.repository.codehaus.org</url>
<url>https://snapshots.repository.codehaus.org</url>
</repository>
<repository>
<id>maven.java.net</id>
Expand Down

0 comments on commit 426740e

Please sign in to comment.