fix(jans-linux-setup): download from tags

[devrimyatar]

Closes #10386

• I confirm that there is no impact on the docs due to the code changes in this PR.

[dryrunsecurity]

DryRun Security Summary

The pull request enhances the Janssen Server installation script's download functionality by improving error handling, adding a fallback download mechanism, and implementing a GitHub access token requirement for the "openbanking" profile, ultimately improving the script's robustness and security.

Expand for full summary

Summary:

The code changes in this pull request focus on improving the download functionality of the Janssen Server installation script. The key changes include better error handling when the initial download from the main branch URL fails, a fallback option to try downloading from the tags URL, and the requirement of a GitHub access token for downloading the "openbanking" profile. These changes enhance the overall robustness and reliability of the installation process, which can be beneficial for the security of the deployed Janssen Server.

While the changes themselves do not raise any immediate security concerns, it's important to note that the installation script as a whole deals with sensitive tasks, such as downloading, extracting, and installing the Janssen Server components. Ensuring the overall security of the installation process, including verifying the integrity and authenticity of the downloaded files, is crucial to maintain the security of the deployed Janssen Server.

Files Changed:

• jans-linux-setup/jans_setup/install.py: This file contains the code for the Janssen Server installation script. The changes in this pull request focus on improving the download functionality of the script, including:
  1. Better error handling when the initial download from the main branch URL fails, providing more informative feedback to the user.
  2. A fallback option to try downloading the Janssen archive from the tags URL if the initial download fails.
  3. Requiring a GitHub access token for downloading the "openbanking" profile, which is a security-conscious approach.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[sonarqubecloud]

Quality Gate passed for 'jans-linux-setup'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud