Use HTTPS instead of HTTP to resolve dependencies

This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
yjshen · Feb 11, 2020 · 227ca98 · 227ca98
1 parent 691fa9f
commit 227ca98
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/dev/audit-release/blank_maven_build/pom.xml b/dev/audit-release/blank_maven_build/pom.xml
@@ -26,7 +26,7 @@
   <repositories>
     <repository>
       <id>Spray.cc repository</id>
-      <url>http://repo.spray.cc</url>
+      <url>https://repo.spray.cc</url>
     </repository>
     <repository>
       <id>Spark Staging Repo</id>

diff --git a/dev/audit-release/maven_app_core/pom.xml b/dev/audit-release/maven_app_core/pom.xml
@@ -26,7 +26,7 @@
   <repositories>
     <repository>
       <id>Spray.cc repository</id>
-      <url>http://repo.spray.cc</url>
+      <url>https://repo.spray.cc</url>
     </repository>
     <repository>
       <id>Spark Staging Repo</id>

diff --git a/pom.xml b/pom.xml
@@ -242,7 +242,7 @@
     <repository>
       <id>mapr-repo</id>
       <name>MapR Repository</name>
-      <url>http://repository.mapr.com/maven</url>
+      <url>https://repository.mapr.com/maven</url>
       <releases>
         <enabled>true</enabled>
       </releases>