rpms/maven
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Pin core ITs to a specific Git commit by full SHA-1

Browse Source 
Avoids ambiguity and potential ref hijacking by checking out commits
using full 40-character SHA-1 hashes instead of short IDs or ref
names.  This ensures that the desired commit is checked out even if
the repository contains maliciously crafted refs.
This commit is contained in:
Mikolaj Izdebski 2025-07-07 07:33:39 +02:00
parent 11f05b0bae
commit 43ccdcc689
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
plans/matrix.fmf
View File

@ -6,7 +6,8 @@ execute:
how: tmt
environment:
MAVEN_IT_GIT_REF: maven-3.9.x
# branch maven-3.9.x
MAVEN_IT_GIT_REF: e3f9b7c9671cdd67bffe5c2d2663b2d92f05441c
/jdk21:
environment+: