[GORA-642] Use HTTPS to resolve dependencies in Maven Build

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9
• Fix Version/s: 1.0
• Component/s: build process
• Assignee: Kevin Ratnasekera
• Reporter: Kevin Ratnasekera
• Created: 04/Mar/20 05:26
• Updated: 04/Mar/20 05:29
• Resolved: 04/Mar/20 05:29

Description

This is a security fix for a vulnerability in Apache Maven pom.xml file(s).

The build files indicate that this project is resolving dependencies over HTTP instead of HTTPS. This leaves build vulnerable to allowing a Man in the Middle (MITM) attackers to execute arbitrary code on local computer or CI/CD system.