commit 0e22df9a4f6d4298dd0189dddb34f57530328c92
author Jonathan Leitschuh <jonathan.leitschuh@gmail.com> Wed Mar 04 03:31:10 2020 -0500
committer GitHub <noreply@github.com> Wed Mar 04 09:31:10 2020 +0100
tree 45bfdc127b3c4ac937a03856df88fdc0cd72907d
parent bfe7872e90e54b6085de31e66bf901f21b3f0e8e

Use HTTPS instead of HTTP to resolve dependencies (#41)

This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

parent/pom.xml

diff --git a/parent/pom.xml b/parent/pom.xml
index 2c4fc66..870d6ec 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -311,7 +311,7 @@
         <repository>
             <id>apache.snapshots</id>
             <name>Apache Maven Snapshot Repository</name>
-            <url>http://repository.apache.org/content/groups/snapshots/</url>
+            <url>https://repository.apache.org/content/groups/snapshots/</url>
             <releases>
                 <enabled>false</enabled>
             </releases>
@@ -326,7 +326,7 @@
         <pluginRepository>
             <id>apache.snapshots</id>
             <name>Apache Maven Snapshot Repository</name>
-            <url>http://repository.apache.org/content/groups/snapshots/</url>
+            <url>https://repository.apache.org/content/groups/snapshots/</url>
             <layout>default</layout>
             <snapshots>
                 <enabled>true</enabled>