Skip to content

Commit 73fba3a

Browse files
Apply suggestions from code review
Co-authored-by: Felicity Chapman <[email protected]>
1 parent 35e2ceb commit 73fba3a

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

java/ql/src/Security/CWE/CWE-1104/MavenPomDependsOnBintray.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@
44
<qhelp>
55
<overview>
66
<p><a href="https://jfrog.com/blog/into-the-sunset-bintray-jcenter-gocenter-and-chartcenter/">Bintray and JCenter are shutting down on February 1st, 2022</a>.
7-
Relying upon repositories that are deprecated or slated to be shutdown can have unintended consequences;
8-
for example, artifacts being resolved from different artifact server or total breakage of the CI build.</p>
7+
Relying upon repositories that are deprecated or scheduled to be shutdown can have unintended consequences;
8+
for example, artifacts being resolved from a different artifact server or a total failure of the CI build.</p>
99

1010
<p>When artifact repositories are left unmaintained for a long period of time, vulnerabilities may emerge.
1111
Theoretically, this could allow attackers to inject malicious code into the artifacts that you are resolving and infect build artifacts

java/ql/src/Security/CWE/CWE-1104/MavenPomDependsOnBintray.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* @name Depending upon JCenter/Bintray as an artifact repository
3-
* @description JCenter & Bintray are deprecated
3+
* @description Using a deprecated artifact repository may eventually give attackers access for a supply chain attack.
44
* @kind problem
55
* @problem.severity error
66
* @precision very-high

0 commit comments

Comments
 (0)