Skip to content

[Backport main] Add ci.opensearch.org/m2/ mirror for plugin resolution (sql) - #5666

Merged
peterzhuamazon merged 1 commit into
opensearch-project:mainfrom
opensearch-ci-bot:backport/backport-5664-to-main
Jul 31, 2026
Merged

[Backport main] Add ci.opensearch.org/m2/ mirror for plugin resolution (sql)#5666
peterzhuamazon merged 1 commit into
opensearch-project:mainfrom
opensearch-ci-bot:backport/backport-5664-to-main

Conversation

@opensearch-ci-bot

@opensearch-ci-bot opensearch-ci-bot commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

Backport fe20ba6 from #5664.

@shreyah963 @peterzhuamazon @opensearch-ci-bot
Add ci.opensearch.org/m2/ mirror for plugin resolution (sql) (opensea…
d630e76 
…rch-project#5664)

* Add ci.opensearch.org/m2/ mirror for plugin resolution (sql)

Signed-off-by: shreyah963 <shreyab963@gmail.com>

* Address order issues

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>

---------

Signed-off-by: shreyah963 <shreyab963@gmail.com>
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Co-authored-by: Peter Zhu <zhujiaxi@amazon.com>
(cherry picked from commit fe20ba6)
Signed-off-by: opensearch-ci-bot <opensearch-infra@amazon.com>
@github-actions

github-actions Bot commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit d630e76.

PathLineSeverityDescription
settings.gradle9highNew Maven repository added at 'https://ci.opensearch.org/m2/' — a second URL on the same host as the existing 'https://ci.opensearch.org/maven2/' but under a different path. This is a build plugin/dependency source change that must be flagged per mandatory rule. The '/m2/' path is not the same endpoint as '/maven2/', and it is unclear whether this URL is an official, maintained, or controlled OpenSearch artifact repository. A malicious actor with access to this path could serve tampered build plugins or dependencies.

The table above displays the top 10 most important findings.

Total: 1 | Critical: 0 | High: 1 | Medium: 0 | Low: 0

Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.

⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

@peterzhuamazon peterzhuamazon mentioned this pull request Jul 31, 2026
Open
65 tasks
@peterzhuamazon
peterzhuamazon merged commit 2852724 into opensearch-project:main Jul 31, 2026
35 of 40 checks passed
@opensearch-ci-bot
opensearch-ci-bot deleted the backport/backport-5664-to-main branch July 31, 2026 21:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@peterzhuamazon peterzhuamazon peterzhuamazon approved these changes
@ps48 ps48 Awaiting requested review from ps48 ps48 is a code owner
@joshuali925 joshuali925 Awaiting requested review from joshuali925 joshuali925 is a code owner
@dai-chen dai-chen Awaiting requested review from dai-chen dai-chen is a code owner
@mengweieric mengweieric Awaiting requested review from mengweieric mengweieric is a code owner
@vamsimanohar vamsimanohar Awaiting requested review from vamsimanohar vamsimanohar is a code owner
@Swiddis Swiddis Awaiting requested review from Swiddis Swiddis is a code owner
@penghuo penghuo Awaiting requested review from penghuo penghuo is a code owner
@anirudha anirudha Awaiting requested review from anirudha anirudha is a code owner
@acarbonetto acarbonetto Awaiting requested review from acarbonetto acarbonetto is a code owner
@ykmr1224 ykmr1224 Awaiting requested review from ykmr1224 ykmr1224 is a code owner
@LantaoJin LantaoJin Awaiting requested review from LantaoJin LantaoJin is a code owner
@noCharger noCharger Awaiting requested review from noCharger noCharger is a code owner
@qianheng-aws qianheng-aws Awaiting requested review from qianheng-aws qianheng-aws is a code owner
@yuancu yuancu Awaiting requested review from yuancu yuancu is a code owner
@RyanL1997 RyanL1997 Awaiting requested review from RyanL1997 RyanL1997 is a code owner
@ahkcs ahkcs Awaiting requested review from ahkcs ahkcs is a code owner
@songkant-aws songkant-aws Awaiting requested review from songkant-aws songkant-aws is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@opensearch-ci-bot @peterzhuamazon @shreyah963