mirror of
https://github.com/github/codeql.git
synced 2025-12-24 04:36:35 +01:00
Update java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.ql
This commit is contained in:
committed by
GitHub
parent
229622459c
commit
0c2da8af40
@@ -33,5 +33,5 @@ private class DeclaredRepository extends PomElement {
|
|||||||
from DeclaredRepository repository
|
from DeclaredRepository repository
|
||||||
where repository.isInsecureRepositoryUsage()
|
where repository.isInsecureRepositoryUsage()
|
||||||
select repository,
|
select repository,
|
||||||
"Downloading or uploading artifacts over insecure protocol (eg. http or ftp) to repository " +
|
"Downloading or uploading artifacts over insecure protocol (eg. http or ftp) to/from repository " +
|
||||||
repository.getUrl()
|
repository.getUrl()
|
||||||
|
|||||||
Reference in New Issue
Block a user