mirror of
https://github.com/github/codeql.git
synced 2025-12-22 03:36:30 +01:00
Update java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.ql
This commit is contained in:
committed by
GitHub
parent
229622459c
commit
0c2da8af40
@@ -33,5 +33,5 @@ private class DeclaredRepository extends PomElement {
|
||||
from DeclaredRepository repository
|
||||
where repository.isInsecureRepositoryUsage()
|
||||
select repository,
|
||||
"Downloading or uploading artifacts over insecure protocol (eg. http or ftp) to repository " +
|
||||
"Downloading or uploading artifacts over insecure protocol (eg. http or ftp) to/from repository " +
|
||||
repository.getUrl()
|
||||
|
||||
Reference in New Issue
Block a user