summaryrefslogtreecommitdiffstats
path: root/tags/d/debian-watch-uses-insecure-uri.tag
diff options
context:
space:
mode:
Diffstat (limited to 'tags/d/debian-watch-uses-insecure-uri.tag')
-rw-r--r--tags/d/debian-watch-uses-insecure-uri.tag9
1 files changed, 9 insertions, 0 deletions
diff --git a/tags/d/debian-watch-uses-insecure-uri.tag b/tags/d/debian-watch-uses-insecure-uri.tag
new file mode 100644
index 0000000..2eb935a
--- /dev/null
+++ b/tags/d/debian-watch-uses-insecure-uri.tag
@@ -0,0 +1,9 @@
+Tag: debian-watch-uses-insecure-uri
+Severity: info
+Check: debian/watch
+Explanation: The watch file uses an unencrypted transport protocol for the
+ URI such as http:// or ftp://. It is recommended to use a secure
+ transport such as HTTPS for anonymous read-only access.
+ .
+ Upstream may already provide a HTTPS variant of the URI. If not,
+ please contact them and ask them to consider adding one.