mirror of
https://github.com/storytold/craft-common-actions.git
synced 2026-11-06 02:22:15 +00:00
security: fetch amd64 security updates over HTTPS (SonarCloud S5332) (#68)
The amd64 security source added in #61 used http://security.ubuntu.com, reintroducing the clear-text apt source that #26 removed for ports.ubuntu.com. security.ubuntu.com serves the same archive over HTTPS.
This commit is contained in:
1 parent
13f14e1788
commit
bfec7e2a70
1 file changed
+1
-1
@@ -24,7 +24,7 @@ runs:
|
||||
# publishes security updates as soon as security.ubuntu.com does, but the runner's amd64 mirror
|
||||
# (azure.archive.ubuntu.com) lags for hours, so apt finds no matching pair ("held broken
|
||||
# packages"). Read amd64 security updates from the primary too, so both sides can match.
|
||||
echo "deb [arch=amd64] http://security.ubuntu.com/ubuntu $VERSION_CODENAME-security main universe restricted multiverse" \
|
||||
echo "deb [arch=amd64] https://security.ubuntu.com/ubuntu $VERSION_CODENAME-security main universe restricted multiverse" \
|
||||
| sudo tee /etc/apt/sources.list.d/amd64-security.list
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y --no-install-recommends \
|
||||
|
||||
Reference in new issue
Block a user