From 105bfa750da6bd690423415bbced34089fd0ac1c Mon Sep 17 00:00:00 2001 From: Zack Koppert Date: Wed, 22 Apr 2026 16:57:40 -0700 Subject: [PATCH] fix: use HTTPS for cpanminus download in CI Switch curl from http:// to https:// when downloading cpanminus to prevent MITM attacks. Also add -fsSL flags for fail-fast on HTTP errors and silent progress. Fixes #2049 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: Zack Koppert --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0cfb5cc5..eba0b2b3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -48,7 +48,7 @@ jobs: sudo apt-get update -qq sudo apt-get install perl rakudo-pkg - curl -L http://cpanmin.us | perl - --sudo App::cpanminus + curl -fsSL https://cpanmin.us | perl - --sudo App::cpanminus sudo cpanm --installdeps --notest Pod::Simple - name: Install Python dependencies