Skip to content

Add ci.opensearch.org/m2/ mirror for plugin resolution (sql) - #5664

Draft
shreyah963 wants to merge 1 commit into
opensearch-project:3.8from
shreyah963:update-plugin-m2
Draft

Add ci.opensearch.org/m2/ mirror for plugin resolution (sql)#5664
shreyah963 wants to merge 1 commit into
opensearch-project:3.8from
shreyah963:update-plugin-m2

Conversation

@shreyah963

@shreyah963 shreyah963 commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

Description

Add ci.opensearch.org/m2/ mirror for plugin resolution (sql)

Issues Resolved

opensearch-project/opensearch-build#6278 (comment)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@github-actions

github-actions Bot commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit 7f6183e.

PathLineSeverityDescription
settings.gradle8highNew Maven repository URL added to pluginManagement: 'https://ci.opensearch.org/m2/'. Per mandatory policy, any addition of a package registry source must be flagged regardless of apparent legitimacy. While the domain matches the existing 'ci.opensearch.org/maven2/' entry, maintainers should verify this path serves the expected artifacts and has not been introduced to shadow legitimate plugins with malicious ones.

The table above displays the top 10 most important findings.

Total: 1 | Critical: 0 | High: 1 | Medium: 0 | Low: 0


Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.


⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

Signed-off-by: shreyah963 <shreyab963@gmail.com>
@shreyah963
shreyah963 changed the base branch from main to 3.8 July 30, 2026 23:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant