[RHPAM-3709] - CVE-2021-26291 rhpam-7-businesscentral-rhel8-container…

[spolti]

…: maven: Block repositories using http by default [rhpam-7]

Signed-off-by: spolti fspolti@redhat.com

Thanks for submitting your Pull Request!

Please make sure your PR meets the following requirements:

• [ ] Pull Request title is properly formatted: [CLOUD-XYA] Subject
• [ ] Pull Request contains link to the JIRA issue
• [ ] Pull Request contains description of the issue
• [ ] Pull Request does not include fixes for issues other than the main ticket
• [ ] Attached commits represent units of work and are properly formatted
• [ ] You have read and agreed to the Developer Certificate of Origin (DCO) (see CONTRIBUTING.md)
• [ ] Every commit contains Signed-off-by: Your Name <yourname@example.com> - use git commit -s

[spolti]

Hi @luck3y do you think we can merge this?

[luck3y]

@spolti I think dropping the RHEL 7 stuff (scl) is probably a good idea, unless you've verified that Maven 3.8 has been added there as well (I can't find it.)

[spolti]

@spolti I think dropping the RHEL 7 stuff (scl) is probably a good idea, unless you've verified that Maven 3.8 has been added there as well (I can't find it.)

seems to be here https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.8_release_notes/chap-rhscl

still on maven 3.6.

Will remove it.,

[luck3y]

+1 from me, thanks @spolti!

[spolti]

@luck3y I am going to merge and create a new tag, is there something else you would like to add to the 0.39.x branch before?

[luck3y]

All good from me, thanks!