Merge pull request #1139 from storytold/sonar-fix/enforce-https

security: enforce HTTPS on curl downloads (SonarCloud S6506)
This commit is contained in:
Dylan M. Taylor
2026-10-21 20:13:49 -04:00
committed by GitHub
+1 -1
View File
@@ -111,7 +111,7 @@ if has appimage; then
if [ -z "$TOOL" ]; then
TOOL="$CARGO_TARGET_DIR/appimagetool-$ARCH.AppImage"
if [ ! -x "$TOOL" ]; then
curl -fsSL -o "$TOOL" "https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-$ARCH.AppImage"
curl --proto '=https' -fsSL -o "$TOOL" "https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-$ARCH.AppImage"
chmod +x "$TOOL"
fi
fi