From b8da97030ead1eac564be4e517d86206a5af834c Mon Sep 17 00:00:00 2001 From: Valery Kharseko Date: Fri, 25 Sep 2026 08:55:22 +0300 Subject: [PATCH] Potential fix for code scanning alert no. 2093: Local information disclosure in a temporary directory Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .../plugin/dependency/AbstractExternalDependencyMojo.java | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/maven-external-dependency-plugin/maven-external-dependency-plugin/src/main/java/com/savage7/maven/plugin/dependency/AbstractExternalDependencyMojo.java b/maven-external-dependency-plugin/maven-external-dependency-plugin/src/main/java/com/savage7/maven/plugin/dependency/AbstractExternalDependencyMojo.java index 584c7aa19..b01368f5d 100644 --- a/maven-external-dependency-plugin/maven-external-dependency-plugin/src/main/java/com/savage7/maven/plugin/dependency/AbstractExternalDependencyMojo.java +++ b/maven-external-dependency-plugin/maven-external-dependency-plugin/src/main/java/com/savage7/maven/plugin/dependency/AbstractExternalDependencyMojo.java @@ -26,6 +26,8 @@ import java.io.InputStream; import java.io.OutputStream; import java.io.Writer; +import java.nio.file.Files; +import java.nio.file.Path; import java.util.ArrayList; import java.util.jar.JarEntry; import java.util.jar.JarFile; @@ -156,8 +158,9 @@ protected File generatePomFile(ArtifactItem artifact) try { - File pomFile = File.createTempFile(artifact.getGroupId() + "." + Path pomFilePath = Files.createTempFile(artifact.getGroupId() + "." + artifact.getArtifactId(), ".pom"); + File pomFile = pomFilePath.toFile(); try (Writer writer = WriterFactory.newXmlWriter(pomFile)) {