Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: apache/maven-assembly-plugin
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: maven-assembly-plugin-3.4.2
Choose a base ref
...
head repository: apache/maven-assembly-plugin
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: maven-assembly-plugin-3.5.0
Choose a head ref
  • 9 commits
  • 15 files changed
  • 5 contributors

Commits on Jul 20, 2022

  1. [maven-release-plugin] prepare for next development iteration

    @michael-o
    michael-o committed Jul 20, 2022
    Configuration menu
    Copy the full SHA
    e01ed50 View commit details
    Browse the repository at this point in the history

Commits on Aug 2, 2022

  1. Fix site "usage" page

    @pzygielo @michael-o
    pzygielo authored and michael-o committed Aug 2, 2022
    Configuration menu
    Copy the full SHA
    69c4f55 View commit details
    Browse the repository at this point in the history

Commits on Nov 2, 2022

  1. update Reproducible Builds badge link

    @hboutemy
    hboutemy authored Nov 2, 2022
    Configuration menu
    Copy the full SHA
    1c6e07e View commit details
    Browse the repository at this point in the history

Commits on Nov 11, 2022

  1. [MASSEMBLY-941] keep file permission in Reproducible mode

    @hboutemy
    hboutemy committed Nov 11, 2022
    Configuration menu
    Copy the full SHA
    b41a8ee View commit details
    Browse the repository at this point in the history

Commits on Nov 12, 2022

  1. Revert "[MASSEMBLY-941] keep file permission in Reproducible mode" 

    This reverts commit b41a8ee.
    @hboutemy
    hboutemy committed Nov 12, 2022
    Configuration menu
    Copy the full SHA
    1336ea7 View commit details
    Browse the repository at this point in the history

Commits on Nov 26, 2022

  1. MASSEMBLY-941 keep file permission in Reproducible mode (#96) 

    [MASSEMBLY-941] keep file permission in Reproducible mode
    @hboutemy
    hboutemy authored Nov 26, 2022
    Configuration menu
    Copy the full SHA
    f42194b View commit details
    Browse the repository at this point in the history

Commits on Jan 21, 2023

  1. improve javadoc

    @hboutemy
    hboutemy committed Jan 21, 2023
    Configuration menu
    Copy the full SHA
    6b62453 View commit details
    Browse the repository at this point in the history

Commits on Jan 22, 2023

  1. vuln-fix: Temporary File Information Disclosure 

    This fixes temporary file information disclosure vulnerability due to the use
of the vulnerable `File.createTempFile()` method. The vulnerability is fixed by
using the `Files.createTempFile()` method which sets the correct posix permissions.

Weakness: CWE-377: Insecure Temporary File
Severity: Medium
CVSSS: 5.5
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.java.security.SecureTempFileCreation)

Reported-by: Jonathan Leitschuh <[email protected]>
Signed-off-by: Jonathan Leitschuh <[email protected]>

Bug-tracker: JLLeitschuh/security-research#18


Co-authored-by: Moderne <[email protected]>
    @JLLeitschuh @TeamModerne @hboutemy
    2 people authored and hboutemy committed Jan 22, 2023
    Configuration menu
    Copy the full SHA
    f5ccd4d View commit details
    Browse the repository at this point in the history

Commits on Feb 19, 2023

  1. [maven-release-plugin] prepare release maven-assembly-plugin-3.5.0

    @hboutemy
    hboutemy committed Feb 19, 2023
    Configuration menu
    Copy the full SHA
    f73f48f View commit details
    Browse the repository at this point in the history
Loading