Skip to content

Commit e3293a2

Browse files
Enable Maven wrapper SHA-256 integrity verification
Populate wrapperSha256Sum and distributionSha256Sum in maven-wrapper.properties so mvnw/mvnw.cmd validate the downloaded wrapper jar and Maven distribution, protecting CI and developer machines from compromised downloads. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent fefafb2 commit e3293a2

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,4 @@
11
distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.9/apache-maven-3.9.9-bin.zip
2+
distributionSha256Sum=4ec3f26fb1a692473aea0235c300bd20f0f9fe741947c82c1234cefd76ac3a3c
23
wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.3.2/maven-wrapper-3.3.2.jar
4+
wrapperSha256Sum=3d8f20ce6103913be8b52aef6d994e0c54705fb527324ceb9b835b338739c7a8

0 commit comments

Comments
 (0)