security: fetch amd64 security updates over HTTPS (SonarCloud S5332) (#68)

The amd64 security source added in #61 used http://security.ubuntu.com,
reintroducing the clear-text apt source that #26 removed for
ports.ubuntu.com. security.ubuntu.com serves the same archive over HTTPS.
This commit is contained in:
Dylan M. Taylor authored and GitHub committed 2026-10-22 22:46:49 -04:00
1 parent 13f14e1788
commit bfec7e2a70
1 file changed
+1 -1
+1 -1
View File
@@ -24,7 +24,7 @@ runs:
# publishes security updates as soon as security.ubuntu.com does, but the runner's amd64 mirror
# (azure.archive.ubuntu.com) lags for hours, so apt finds no matching pair ("held broken
# packages"). Read amd64 security updates from the primary too, so both sides can match.
echo "deb [arch=amd64] http://security.ubuntu.com/ubuntu $VERSION_CODENAME-security main universe restricted multiverse" \
echo "deb [arch=amd64] https://security.ubuntu.com/ubuntu $VERSION_CODENAME-security main universe restricted multiverse" \
| sudo tee /etc/apt/sources.list.d/amd64-security.list
sudo apt-get update
sudo apt-get install -y --no-install-recommends \