Skip to content

Commit 105bfa7

Browse files
zkoppertCopilot
andcommitted
fix: use HTTPS for cpanminus download in CI
Switch curl from http:// to https:// when downloading cpanminus to prevent MITM attacks. Also add -fsSL flags for fail-fast on HTTP errors and silent progress. Fixes #2049 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: Zack Koppert <zkoppert@github.com>
1 parent 84dae8a commit 105bfa7

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/ci.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ jobs:
4848
sudo apt-get update -qq
4949
sudo apt-get install perl rakudo-pkg
5050
51-
curl -L http://cpanmin.us | perl - --sudo App::cpanminus
51+
curl -fsSL https://cpanmin.us | perl - --sudo App::cpanminus
5252
sudo cpanm --installdeps --notest Pod::Simple
5353
5454
- name: Install Python dependencies

0 commit comments

Comments
 (0)