This repository was archived by the owner on Jan 7, 2025. It is now read-only.
This repository was archived by the owner on Jan 7, 2025. It is now read-only.
insecure gradlew #61
Description
in case this project is still maintained: a minor fix would be required to increase build security. F-Droid lint complains:
Found plain HTTP URL for gradle repository:
build/com.coste.syncorg/SyncOrg/build.gradle
repositories {
maven { url 'http://guardian.github.com/maven/repo-releases' }
gradle build uses plain HTTP URLs for repositories! This is insecure!
https://max.computer/blog/how-to-take-over-the-computer-of-any-java-or-clojure-or-scala-developer/
Simply make that an https URL, the target supports that. Thanks!