Commit f49d26f
fix: Failure to use secure URL in Maven artifact upload/download (#1348)
Potential fix for
[https://github.com/eclipse-lsp4e/lsp4e/security/code-scanning/1](https://github.com/eclipse-lsp4e/lsp4e/security/code-scanning/1)
To fix the problem, change the `<url>` value under `<repository>` at
line 194 inside the `tycho-p2-plugin`'s `<baselineRepositories>`.
Specifically, update it from
`http://download.eclipse.org/lsp4e/snapshots` to
`https://download.eclipse.org/lsp4e/snapshots`. This ensures all
artifact downloads are performed over an encrypted channel, preventing
interception and tampering.
Only one line within the `<baselineRepositories>` block needs to be
edited. No other configuration changes, imports, or plugin modifications
are required.
---
_Suggested fixes powered by Copilot Autofix. Review carefully before
merging._
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>1 parent 7479a52 commit f49d26f
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
191 | 191 | | |
192 | 192 | | |
193 | 193 | | |
194 | | - | |
| 194 | + | |
195 | 195 | | |
196 | 196 | | |
197 | 197 | | |
| |||
0 commit comments