Skip to content

Commit 01285f0

Browse files
Adam WilliamsSethTisue
Adam Williams
authored andcommitted
Ensure archive fetch script uses HTTPS download
This is to prevent an MitM possible by downloading the releases in plain text (using HTTP). Per scala/scala-lang#627 this script appears to make artifacts available on scala-lang.org and so any form of attack here could be problematic.
1 parent 5379de9 commit 01285f0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

scripts/jobs/release/website/archives

+1-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
# need to re-declare it as an array, not sure how to do that directly in jenkins
33
declare -a sshCharaArgs="$sshCharaArgs"
44

5-
url="http://downloads.lightbend.com/scala/$version"
5+
url="https://downloads.lightbend.com/scala/$version"
66

77
if [[ "$version" =~ ^.*-(bin|pre)-[0-9a-f]+$ ]]
88
then archivesDir="~linuxsoft/archives/scala/nightly/2.11.x"

0 commit comments

Comments
 (0)