From 6d4a331319ef3679c8c51b68574c60e7c098bd79 Mon Sep 17 00:00:00 2001 From: kthatipally <99229993+kthatipally@users.noreply.github.com> Date: Mon, 11 Nov 2024 10:04:23 -0600 Subject: [PATCH] Update the HTTP GET maven search API call to HTTPS to ensure the requests for search results are securely made Signed-off-by: kthatipally <99229993+kthatipally@users.noreply.github.com> --- .../java-external-provider/pkg/java_external_provider/util.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/external-providers/java-external-provider/pkg/java_external_provider/util.go b/external-providers/java-external-provider/pkg/java_external_provider/util.go index 5d1b5804..b236a352 100644 --- a/external-providers/java-external-provider/pkg/java_external_provider/util.go +++ b/external-providers/java-external-provider/pkg/java_external_provider/util.go @@ -547,8 +547,8 @@ func constructArtifactFromSHA(jarFile string) (javaArtifact, error) { sha1sum := hex.EncodeToString(hash.Sum(nil)) - // Make an HTTP request to search.maven.org - searchURL := fmt.Sprintf("http://search.maven.org/solrsearch/select?q=1:%s&rows=20&wt=json", sha1sum) + // Make an HTTPS request to search.maven.org + searchURL := fmt.Sprintf("https://search.maven.org/solrsearch/select?q=1:%s&rows=20&wt=json", sha1sum) resp, err := http.Get(searchURL) if err != nil { return dep, err