Skip to content

Commit bbdb7c1

Browse files
author
Adam Williams
committed
Ensure archive fetch script uses HTTPS download
This is to prevent an MitM possible by downloading the releases in plain text (using HTTP). Per scala/scala-lang#627 this script appears to make artifacts available on scala-lang.org and so any form of attack here could be problematic.
1 parent bfd37b1 commit bbdb7c1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

scripts/jobs/release/website/archives

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
# need to re-declare it as an array, not sure how to do that directly in jenkins
33
declare -a sshCharaArgs="$sshCharaArgs"
44

5-
url="http://downloads.lightbend.com/scala/$version"
5+
url="https://downloads.lightbend.com/scala/$version"
66

77
if [[ "$version" =~ ^.*-(bin|pre)-[0-9a-f]+$ ]]
88
then archivesDir="~linuxsoft/archives/scala/nightly/2.12.x"

0 commit comments

Comments
 (0)