Skip to content

Commit f49d26f

Browse files
fix: Failure to use secure URL in Maven artifact upload/download (#1348)
Potential fix for [https://github.com/eclipse-lsp4e/lsp4e/security/code-scanning/1](https://github.com/eclipse-lsp4e/lsp4e/security/code-scanning/1) To fix the problem, change the `<url>` value under `<repository>` at line 194 inside the `tycho-p2-plugin`'s `<baselineRepositories>`. Specifically, update it from `http://download.eclipse.org/lsp4e/snapshots` to `https://download.eclipse.org/lsp4e/snapshots`. This ensures all artifact downloads are performed over an encrypted channel, preventing interception and tampering. Only one line within the `<baselineRepositories>` block needs to be edited. No other configuration changes, imports, or plugin modifications are required. --- _Suggested fixes powered by Copilot Autofix. Review carefully before merging._ Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent 7479a52 commit f49d26f

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -191,7 +191,7 @@
191191
<configuration>
192192
<baselineRepositories>
193193
<repository>
194-
<url>http://download.eclipse.org/lsp4e/snapshots</url>
194+
<url>https://download.eclipse.org/lsp4e/snapshots</url>
195195
</repository>
196196
</baselineRepositories>
197197
</configuration>

0 commit comments

Comments
 (0)