Merge pull request #1 from erikeverts/fix-unauthenticated-git-call

peimanja · Mar 28, 2022 · efe8ed7 · efe8ed7
2 parents 9a280c1 + c529b57
commit efe8ed7
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,3 +2,6 @@
 
 ## v0.0.1
 Initial release.
+
+## v0.0.2
+Changed unauthenticated git:// call to https:// to overcome issues documented here https://github.blog/2021-09-01-improving-git-protocol-security-github/
diff --git a/src/main.sh b/src/main.sh
@@ -25,7 +25,7 @@ function parseInputs {
 function installAmtool {
   if [[ "${amtoolVersion}" == "latest" ]]; then
     echo "Checking the latest version of Amtool"
-    amtoolVersion=$(git ls-remote --tags --refs --sort="v:refname"  git://github.com/prometheus/alertmanager | grep -v '[-].*' | tail -n1 | sed 's/.*\///' | cut -c 2-)
+    amtoolVersion=$(git ls-remote --tags --refs --sort="v:refname"  https://github.com/prometheus/alertmanager | grep -v '[-].*' | tail -n1 | sed 's/.*\///' | cut -c 2-)
     if [[ -z "${amtoolVersion}" ]]; then
       echo "Failed to fetch the latest version"
       exit 1